resource.leagcard.com

- China Unionpay Data Services Co., Ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:09:e5:2d:6c:e7:dd:00:54:bc:cd:e3:40:5d:e9:c9 was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd

Organization: China Unionpay Data Services Co., Ltd
Organization unit: Innovation Business Dept.
State / Province: Shanghai
Locality: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:09:e5:2d:6c:e7:dd:00:54:bc:cd:e3:40:5d:e9:c9
Serial Number (int): 19989798879271787490771098525144836553
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 58:3b:de:99:6d:68:6b:c9:38:4c:3b:e6:87:6e:a6:9e:92:48:8a:53
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): e4:1c:95:6a:0a:75:47:fa:b0:83:b0:4a:70:5c:31:00:7f:7c:b4:e1
Fingerprint (sha256): 58:71:44:9d:41:28:a6:6d:0b:ae:a3:13:f0:02:55:be:18:cb:e8:8d:3f:75:8b:8b:d7:94:51:fe:c2:8e:4e:c7

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://ocsp1.digicert.com
CRL Distribution Point: http://cdp1.digicert.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate resource.leagcard.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resource.leagcard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resource.leagcard.com
shop.fjnx.com.cn
creditcard.klb.cn
smssp.cupdata.com
card.bankoffs.com.cn
cardmall.grcbank.com
right.mintaibank.com
mall.scrcu.com
shop.jshbank.com
jf.qinnongbank.com
jsbretail.leagcard.com
www.huajifen.com
jfmall.ynrcc.com
mall.sdebank.com

Other certificates including the domain name leagcard.com

(limited to 100 certificates)
web.cupdata.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
app.cupdapp.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
web.cupdata.com
resource.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
app.cupdapp.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
*.leagcard.com
onlinepay.cupdata.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
app.cupdapp.com
mall.rong-data.com
mall.rong-data.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
prepaidcard.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
*.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
*.leagcard.com
resource.leagcard.com
mall.rong-data.com
mall.rong-data.com
web.cupdata.com

Certificate

The complete raw certificate details for resource.leagcard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHvjCCBqagAwIBAgIQDwnlLWzn3QBUvM3jQF3pyTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODA1MjkwMDAwMDBaFw0yMDA4MTYxMjAwMDBaMIGnMQswCQYDVQQGEwJDTjER
MA8GA1UECBMIU2hhbmdoYWkxETAPBgNVBAcTCFNoYW5naGFpMS4wLAYDVQQKEyVD
aGluYSBVbmlvbnBheSBEYXRhIFNlcnZpY2VzIENvLiwgTHRkMSIwIAYDVQQLExlJ
bm5vdmF0aW9uIEJ1c2luZXNzIERlcHQuMR4wHAYDVQQDExVyZXNvdXJjZS5sZWFn
Y2FyZC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZYqmOa0ZZ
TbWWcRvoY0cjJjF4x4Q4dJpoxeUGH1CmrlQ+XeseErdMjJZPzaF8mspZMXsRvhNl
bwKGSOPgvn6QyDHXCg08qOBCsqfSyEUp6AnIVibZIsIJD/iAcgJzZBVUd0+fbYDi
4+LI7hv7fXBMf77B873gqKP6BiX7kW/ix/BoIYu4w/cEKYSlgcPCBtVZZRAFjcq0
3nJ86jZaEL+GZ4pCqycAwZ+Vf/XAWWRZmhEGuo2cFQD9XXBmlwfK4O6fsASBU81p
Jimv9/sIpoxC6+Y00+P+0bt8JRuuLDWQSdxq4LccFoPAwOugHXRZtPpgbzf1btAZ
W+OtPCPuRTR/AgMBAAGjggQsMIIEKDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3y
o0MWOJ5sxTAdBgNVHQ4EFgQUWDvemW1oa8k4TDvmh26mnpJIilMwggEiBgNVHREE
ggEZMIIBFYIVcmVzb3VyY2UubGVhZ2NhcmQuY29tghBzaG9wLmZqbnguY29tLmNu
ghFjcmVkaXRjYXJkLmtsYi5jboIRc21zc3AuY3VwZGF0YS5jb22CFGNhcmQuYmFu
a29mZnMuY29tLmNughRjYXJkbWFsbC5ncmNiYW5rLmNvbYIUcmlnaHQubWludGFp
YmFuay5jb22CDm1hbGwuc2NyY3UuY29tghBzaG9wLmpzaGJhbmsuY29tghJqZi5x
aW5ub25nYmFuay5jb22CFmpzYnJldGFpbC5sZWFnY2FyZC5jb22CEHd3dy5odWFq
aWZlbi5jb22CEGpmbWFsbC55bnJjYy5jb22CEG1hbGwuc2RlYmFuay5jb20wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNV
HR8EODA2MDSgMqAwhi5odHRwOi8vY2RwMS5kaWdpY2VydC5jb20vR2VvVHJ1c3RS
U0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUH
AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHQGCCsG
AQUFBwEBBGgwZjAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AxLmRpZ2ljZXJ0LmNv
bTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1Ry
dXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8E
ggFrAWkAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWOrD8Pl
AAAEAwBIMEYCIQC1R0Wyig08dQF1fpYPMbcGrjHEOHy8ZENuT7hHIqTnZwIhAKvN
Xh2fDPhzqzZS6MPQehiXJ/+yZHWfbCgh4Z0rvxMFAHYAh3W/51l8+IxDmV+9827/
Vo1HVjb/SrVgwbTq/16ggw8AAAFjqw/EzgAABAMARzBFAiEA0GgZVPtXroNouxkx
iKRqFguDMuvSQ/o317cICGHKcc0CIAw8jouDZ9ZoWCvH8ZnqMCLEPdannK2kSk1g
T//aQk36AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFjqw/E
6QAABAMARzBFAiEAq0mmf248/p9fjDZ+pFSwBvZXagJRz/LwThvRIidyaUsCIHlm
TRay4BMTn6l+vNw+ViazsBpdbrodL5XMuFke9cK0MA0GCSqGSIb3DQEBCwUAA4IB
AQBt7dBwHjQj8T6OWR7Fq2Bnb0Nx0WKpHaVLccw7Pk87uz0ApSt/5BG6bT/tWfYr
+8cQgx03yWTeFd5gSN6SlTvQCKVh8VH65rPCPSToNYdL4lRBwdKniJJdUjyZv/u9
owl8OLa0M69/mLGOOvFaoCngmU6Es8cmp+sBAqnhkM4OqKu6J01wcXWa2BupLaPE
PWQdCY6YbXQPe5P1pp9V4Q9Idn4y04LTyBGNC1hPwbnmopzdrMdgZWAFq17fiBj/
PXm6O7TLKZHrbtQwr2dD/u++Mhz77BHw7MzsBHlEHC5Lm3lWpVACnftqohu/NfF7
Xm4ZcUKFkVsL90wcsTj2uVdZ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWKpjmtGWU21lnEb6GNH
IyYxeMeEOHSaaMXlBh9Qpq5UPl3rHhK3TIyWT82hfJrKWTF7Eb4TZW8Chkjj4L5+
kMgx1woNPKjgQrKn0shFKegJyFYm2SLCCQ/4gHICc2QVVHdPn22A4uPiyO4b+31w
TH++wfO94Kij+gYl+5Fv4sfwaCGLuMP3BCmEpYHDwgbVWWUQBY3KtN5yfOo2WhC/
hmeKQqsnAMGflX/1wFlkWZoRBrqNnBUA/V1wZpcHyuDun7AEgVPNaSYpr/f7CKaM
QuvmNNPj/tG7fCUbriw1kEncauC3HBaDwMDroB10WbT6YG839W7QGVvjrTwj7kU0
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19989798879271787490771098525144836553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Innovation Business Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resource.leagcard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19363112867722846479667245130616052182181656495133558518274330506638484398565343761975281172244339677316711035031463139607870934420307971627691127071616607007621889857508913927320896719600919434440771486942196334186947670862524560206178878720642971601990200837107712824483636426760210301503239622852473839892207228854321674342737719853457281234180804199214906053827588243129581946222383795616316000294733705642702256376905724999778063351512405423313462692073153396933677790298461561548389444167849020756024950234672284621443758467072983426765115282482057913415771090056536428269680384042433620838981287917049300202623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							583bde996d686bc9384c3be6876ea69e92488a53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fjnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.klb.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smssp.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card.bankoffs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardmall.grcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'right.mintaibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.scrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jshbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jf.qinnongbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsbretail.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huajifen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfmall.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.sdebank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.digicert.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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