appsigndest.cupdapp.com

- China Unionpay Data Services Co., Ltd -

Issued by CFCA OV OCA

About this certificate

This digital certificate with serial number 20:15:01:4b:3e:65:d2:24:d8:58:fd:a9:ac:84:4a:78 was issued on by China Financial Certification Authority.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

China Unionpay Data Services Co., Ltd

Organization: China Unionpay Data Services Co., Ltd
Organization unit: Innovation Business Dept.
State / Province: Shanghai
Locality: Shanghai
Country: CN

China Financial Certification Authority

Organization: China Financial Certification Authority
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 20:15:01:4b:3e:65:d2:24:d8:58:fd:a9:ac:84:4a:78
Serial Number (int): 42644360342979496027954859916881316472
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 2d:56:7b:e6:80:10:81:fa:7a:5b:65:19:9b:03:c0:be:3a:3c:4d:eb
AuthorityKeyId: 66:b3:ef:fb:54:95:87:e9:ac:a5:96:56:ae:e6:7d:ed:3a:d0:43:d1

Fingerprint (sha1): c7:00:dc:91:9e:d0:85:3d:f5:30:bf:c3:8e:83:ef:3f:26:b0:c3:0d
Fingerprint (sha256): 5b:b9:f2:01:50:2a:76:12:8e:fc:ac:64:ad:46:f9:ed:9d:1a:c1:cc:8d:ba:af:df:ab:1b:df:bc:cc:40:0f:c2

Issuing Certificate URL: http://gtc.cfca.com.cn/ovoca/ovoca.cer

Revocation information

OCSP Server: http://ocsp.cfca.com.cn/ocsp
CRL Distribution Point: http://crl.cfca.com.cn/OVOCA/RSA/crl25.crl

Check the revocation status for certificate appsigndest.cupdapp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for appsigndest.cupdapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appsigndest.cupdapp.com

Other certificates including the domain name cupdapp.com

(limited to 100 certificates)
wechat.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
api.ws.cupdapp.net
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
*.unicorn.cupdapp.com
ant.ccbillinst.cupdapp.com
ncoas.cupdapp.com
milkywaypage.cupdapp.com
xdzlar.cupdata.com
ncoas.cupdapp.com
ws.cupdapp.net
appsignsrc.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
*.static.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
app.cupdapp.com
ncoas.cupdapp.com
securityplus.cupdata.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
directbank.cupdata.com
ws.cupdapp.net
perbank.cupdapp.com
apptranssign.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
prepaidcard.leagcard.com
ncoas.cupdapp.com
ncoas.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
api.ws.cupdapp.net
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
milkywaypage.cupdapp.com
crbep.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
stmt.cupdapp.com
app.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
perbank.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
stmt.cupdapp.com
app.cupdapp.com
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
api.ws.cupdapp.net
app.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
stmt.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
wx.cupdapp.com

Certificate

The complete raw certificate details for appsigndest.cupdapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIQIBUBSz5l0iTYWP2prIRKeDANBgkqhkiG9w0BAQsFADBV
MQswCQYDVQQGEwJDTjEwMC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmlj
YXRpb24gQXV0aG9yaXR5MRQwEgYDVQQDDAtDRkNBIE9WIE9DQTAeFw0xOTEyMjcw
ODQ5MDVaFw0yMTEyMjcwODQ5MDVaMIGpMQswCQYDVQQGEwJDTjERMA8GA1UECAwI
U2hhbmdoYWkxETAPBgNVBAcMCFNoYW5naGFpMS4wLAYDVQQKDCVDaGluYSBVbmlv
bnBheSBEYXRhIFNlcnZpY2VzIENvLiwgTHRkMSIwIAYDVQQLDBlJbm5vdmF0aW9u
IEJ1c2luZXNzIERlcHQuMSAwHgYDVQQDDBdhcHBzaWduZGVzdC5jdXBkYXBwLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMssSYW1NhR0NqfOKgfC
Yn+7qvXDemB4yQawn1ooaC6P4+uk6HTTvp+NXQDfQcF/uVguva3wR/p0hzz9uoeu
r+6XZ5IMT/tivLI5wkcUNdHM81Sk/8TsDQSlZU9Y+UkKpeYxmUAWAP1xGb+ereoK
jKlbFQVYU1dxS6MU/hMUbN3UANN/5IoLPFqgGBI1n5KU82g135MTaiaXkcesa7i5
6AkYDOJ15Wh75JzpW1d4pXzkz4YwhIxbaQ9Pw+tUcMRrN3fI2Le8OLv4srgik2xx
u0QcbTwo8QTH4+k1noU8S80CFV8Yd24QKG3m29kPasp/eUJbLGoh00ah+ESup6vw
VY0CAwEAAaOCAacwggGjMAkGA1UdEwQCMAAwbAYIKwYBBQUHAQEEYDBeMCgGCCsG
AQUFBzABhhxodHRwOi8vb2NzcC5jZmNhLmNvbS5jbi9vY3NwMDIGCCsGAQUFBzAC
hiZodHRwOi8vZ3RjLmNmY2EuY29tLmNuL292b2NhL292b2NhLmNlcjAiBgNVHREE
GzAZghdhcHBzaWduZGVzdC5jdXBkYXBwLmNvbTALBgNVHQ8EBAMCBaAwHQYDVR0O
BBYEFC1We+aAEIH6eltlGZsDwL46PE3rMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr
BgEFBQcDATATBgorBgEEAdZ5AgQDAQH/BAIFADAfBgNVHSMEGDAWgBRms+/7VJWH
6aylllau5n3tOtBD0TBGBgNVHSAEPzA9MDsGBmeBDAECAjAxMC8GCCsGAQUFBwIB
FiNodHRwOi8vd3d3LmNmY2EuY29tLmNuL3VzL3VzLTEyLmh0bTA7BgNVHR8ENDAy
MDCgLqAshipodHRwOi8vY3JsLmNmY2EuY29tLmNuL09WT0NBL1JTQS9jcmwyNS5j
cmwwDQYJKoZIhvcNAQELBQADggEBAHQINViOaOKqCAOjhb6UEqDnQgjmCDAhnvLg
Pc44FPqEv0gBfsi0MO3xgcqXNifUaja7b32UtMHTW37HpPvPYlq1Uf4C/tEc4UlM
cQJyXcTx9BdaL5V3IiJAQuxLdFtOD5CfcZLiPE5ku1/m1pc+cytsU5F9A2qnxkHA
RZrexZMCRDZKB2AayA4RcBzjvbk7AjIM8ucT03lPKFQMqrDsLXIoxl44255ydtQZ
fwjPGLs9Ar+p+EYYKGoRqo6lfyezmC3m7eDYe+1xH1oO2Zfb1B5AUp//AnQQsUaS
9vgMV48RpLWAY0m99cDSIU7TqZzQUp/dI1Bf3/3iJiBvawIYgas=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyxJhbU2FHQ2p84qB8Ji
f7uq9cN6YHjJBrCfWihoLo/j66TodNO+n41dAN9BwX+5WC69rfBH+nSHPP26h66v
7pdnkgxP+2K8sjnCRxQ10czzVKT/xOwNBKVlT1j5SQql5jGZQBYA/XEZv56t6gqM
qVsVBVhTV3FLoxT+ExRs3dQA03/kigs8WqAYEjWfkpTzaDXfkxNqJpeRx6xruLno
CRgM4nXlaHvknOlbV3ilfOTPhjCEjFtpD0/D61RwxGs3d8jYt7w4u/iyuCKTbHG7
RBxtPCjxBMfj6TWehTxLzQIVXxh3bhAobebb2Q9qyn95QlssaiHTRqH4RK6nq/BV
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42644360342979496027954859916881316472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Financial Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CFCA OV OCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 08:49:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-27 08:49:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Unionpay Data Services Co., Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Innovation Business Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'appsigndest.cupdapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25648214738633606458334965837896053191224307850309179197618637843333665094845025050050332271994079347527709960560657458439403814332719886152705830569729977973255280845492646860908757820800573894441110088605978849630604811713264149417304890405853443116074341290960051030554198933256977559996820872323626105590611062094375642569416781265948977569799716663688716574530789953866787465978483327253480041552874991973805343942468981627978376962106279347715273937492052644092823113156379726451572847445835521392982957606492893472130716422380975776946180643642770403252022463273085144356819204710739693917682489943864097396109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.cfca.com.cn/ocsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtc.cfca.com.cn/ovoca/ovoca.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsigndest.cupdapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d567be6801081fa7a5b65199b03c0be3a3c4deb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66b3effb549587e9aca59656aee67ded3ad043d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.cfca.com.cn/us/us-12.htm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.cfca.com.cn/OVOCA/RSA/crl25.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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