resource.leagcard.com

- China Unionpay Data Services Co., Ltd -

Issued by GeoTrust CN RSA CA G1

About this certificate

This digital certificate with serial number 07:63:2b:05:32:05:e5:c5:b3:22:90:55:b8:07:43:4c was issued on by DigiCert Inc.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd

Organization: China Unionpay Data Services Co., Ltd
Organization unit: Innovation Business Dept.
State / Province: Shanghai
Locality: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:63:2b:05:32:05:e5:c5:b3:22:90:55:b8:07:43:4c
Serial Number (int): 9819505914724508827707610689559806796
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b0:68:c7:33:bf:8c:16:bc:2e:70:08:82:7c:b3:79:66:06:5b:04:dd
AuthorityKeyId: 91:9f:5e:31:15:ae:10:9f:ad:60:c1:f7:c1:cc:aa:48:34:2f:0c:26

Fingerprint (sha1): 9c:d3:67:f7:6b:07:32:1d:4c:cd:13:c8:dd:8a:2e:92:8c:a7:c6:eb
Fingerprint (sha256): 57:c2:71:15:09:e2:f8:39:18:d3:31:12:9d:45:0c:5d:dc:56:9f:fb:48:dd:13:9a:56:6f:0b:e8:c5:a8:59:7a

Issuing Certificate URL: http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://crl3.digicert.com/GeoTrustCNRSACAG1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustCNRSACAG1.crl

Check the revocation status for certificate resource.leagcard.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resource.leagcard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resource.leagcard.com
*.leagcard.com
mall.bankoftianjin.com
shop.jshbank.com
www.huajifen.com
jsbretail.leagcard.com
mall.xacbank.com
mall.gsrcu.com
movie.haimocultural.com
right.wdnsbank.com
shop.qrcb.com.cn
jfmall.ynrcc.com
mall.bankgz.com
czbank.cupdata.com
creditcardapply.jx-bank.com
ccmall.hkbchina.com
smssp.cupdata.com
cardmall.grcbank.com
creditcard.klb.cn
market.gsbankchina.com
mall.sdebank.com
mall.jinzhoubank.com
mall.scrcu.com
right.cqrcb.com
rightretail.hebbank.com
rightcredit.jsbchina.cn
rightretail.hsbank.com.cn
card.bankoffs.com.cn
mall.hnnxs.com
hbbretail.leagcard.com
creditcardrights.hnnx.com
creditcardapply.hsbank.com.cn
rightretail.jinzhoubank.com
hsbankretail.leagcard.com
mall.jlnls.com
creditcardapply.hrbb.com.cn
shop.fjnx.com.cn
swoop-nwd.rong-data.com
importcardapply.hsbank.com.cn
rightretail.sdebank.com
creditcardapply2.shengjingbank.com.cn
right.mintaibank.com
creditcardapply1.shengjingbank.com.cn
right.bankofrizhao.com.cn
www.gtldsc.com
rightretail.jsbchina.cn
jf.qinnongbank.com
jsbdirect.leagcard.com
right.cbhb.com.cn

Other certificates including the domain name leagcard.com

(limited to 100 certificates)
web.cupdata.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
app.cupdapp.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
web.cupdata.com
resource.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
app.cupdapp.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
*.leagcard.com
onlinepay.cupdata.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
app.cupdapp.com
mall.rong-data.com
mall.rong-data.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
prepaidcard.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
*.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
*.leagcard.com
resource.leagcard.com
mall.rong-data.com
mall.rong-data.com
web.cupdata.com

Certificate

The complete raw certificate details for resource.leagcard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKmJxVGRdfnFCeeb3BNt
mPyDnMlh31KSKuPTKx7Ya4RQlcDV6AdyfKNHDmH+CC6JWLSjC0fNUn42oldd5WzV
17yR0nG4952ANaAnFdoa+Nuf6dfxvbF/3msgSQlHjvUYG+6ddVKqpKNMTDu8DjmN
2DJY2J45a0gk4wojuX3ptqrprjsaVD5/+t6SDQMd1l9FkZQ9Ue2CNCSHxy6kHUXf
oRVJhpB+/4jLovjuvkm1JO93Xebzio0TNw4CyIfBj52G5caZjMZBDahaLkKPi/Ae
9mQJZNkqAPAdVZWg7PpHUXHgdCq0Bd3tI8JSRD2rwQep37XHg8ygOCnwd/QB0MsF
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9819505914724508827707610689559806796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust CN RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Innovation Business Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resource.leagcard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17252011861481274412580221050480547470330890754118061410205336679698766813864029006845055926277446373157125517766442767495805833792662268617119460753330162069938571420421463217215991332933148746912249229636981271272504345020647541291069267082673783212877220811186385548290463948251378699864089995234040564609476807760735359426361747126561320264915808197109522643095872293795456142768373359831671624951356390575740466122430938290346772051680614426743087181992164457428669114089528964182618440517460810066385107779966306045473688042825846257234302024926553619524769046864390562117004101031227600740649064577153077282199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919f5e3115ae109fad60c1f7c1ccaa48342f0c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b068c733bf8c16bc2e7008827cb37966065b04dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.bankoftianjin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jshbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huajifen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsbretail.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.xacbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.gsrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movie.haimocultural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.wdnsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.qrcb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfmall.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.bankgz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czbank.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply.jx-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmall.hkbchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smssp.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardmall.grcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.klb.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'market.gsbankchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.sdebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.jinzhoubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.scrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.cqrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightretail.hebbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightcredit.jsbchina.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightretail.hsbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card.bankoffs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.hnnxs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbretail.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardrights.hnnx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply.hsbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightretail.jinzhoubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbankretail.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.jlnls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply.hrbb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fjnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swoop-nwd.rong-data.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'importcardapply.hsbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightretail.sdebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply2.shengjingbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.mintaibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply1.shengjingbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.bankofrizhao.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtldsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightretail.jsbchina.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jf.qinnongbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsbdirect.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.cbhb.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016d6b629b9f0000040300473045022100d8e8d4ca34ed81f3d4ba61fa3bd6ea7cc480e4f2b46ed4361d0e667b060a106e02204e4e8f17cafabece80c6d9227e7de49262d6d65f02e23a093e5aa91f5eaef8e90075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d6b629bfb000004030046304402200b5720085e094432568e6875a63d7c8292cceab986b5115d3d2cb9ef83a36945022074529ff4f0dded4192213ff0f4ed12364aaa80b92c248ac8a61f7db07ea2a9a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0021f0ff61c15679366ca413e2fd9136dd71faa769e5d14b83e9af27563efe53c545e03f1316d5b36bd8d899440a234e32f554c18dc7b161ee09c8987b70360475e1a66f9f7bf4ee3ab34a7f4a71dde487656a4412235415664e1b658dc80f166ca1452c5534c45ff637927bea5e314052a18c28aaccaf674c109349bfd2bc2933541b671a41acd89a5f771e71f1da889b5a4366926be9546765b0b4d3fad94a9ee06547be9ac60edab1f50b16bf4c6be2dcd7ffe2a54b3a9f7207153ce71c059e2f63e028fc2fda23d61c2564c8a00ba0e5aec458001833fc5d6f1d445365d77364a33eb71096162038d82b2ea99580e3eb60439c4a496f169b01e08d98366178