owa.tchibo.com.hk

- Tchibo GmbH -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number d8:2c:5c:71:85:f4:eb:aa:27:8c:4f:2a:25:86:85:be was issued on by Corporation Service Company.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tchibo GmbH

Organization: Tchibo GmbH
Organization unit: ITO-I
Address: Ueberseering 18
Postal code: 22297
State / Province: Hamburg
Locality: Hamburg
Country: DE

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d8:2c:5c:71:85:f4:eb:aa:27:8c:4f:2a:25:86:85:be
Serial Number (int): 287343583127240858129571388339553469886
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e7:b9:72:d4:5c:46:fe:12:42:a8:15:26:2a:0d:ec:26:90:e6:21:33
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 44:05:ea:6e:63:2d:76:cd:d7:8d:db:94:f6:1e:23:49:7a:dc:dd:72
Fingerprint (sha256): 62:66:cc:16:5d:93:de:61:76:a5:02:b7:a2:16:a4:b7:bb:70:54:9e:40:16:fc:28:d7:da:30:5a:36:b7:28:ec

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate owa.tchibo.com.hk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.tchibo.com.hk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.tchibo.com.hk
autodiscover.hk.tchiboroot.net
autodiscover.tchibo.com.hk
ews.tchibo.com.hk
owa.hk.tchiboroot.net
www.owa.tchibo.com.hk

Other certificates including the domain name tchibo.com.hk

(limited to 100 certificates)
smtp.tchibo.com.hk
ssl.tchibo.com.hk
www.tchibo.com.hk
ots.tchibo.com.hk
access.tchibo.com
sip.tchibo.com
owa.tchibo.com.hk
owa.tchibo.com.hk
smtp.tchibo.com.hk
owa.tchibo.com.hk
ots.tchibo.com.hk
owa.tchibo.com.hk
www.tchibo.com
ots.tchibo.com.hk
access.tchibo.com
ots.tchibo.com.hk
smtp.tchibo.com.hk
www.tchibo.com
ots.tchibo.com.hk
*.tchibo.com.hk
ots.tchibo.com.hk

Certificate

The complete raw certificate details for owa.tchibo.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH+zCCBuOgAwIBAgIRANgsXHGF9OuqJ4xPKiWGhb4wDQYJKoZIhvcNAQELBQAw
gYYxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJERTETMBEGA1UEBxMKV2lsbWluZ3Rv
bjEkMCIGA1UEChMbQ29ycG9yYXRpb24gU2VydmljZSBDb21wYW55MS8wLQYDVQQD
EyZUcnVzdGVkIFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgNTAeFw0yMDAz
MjMwMDAwMDBaFw0yMTAzMjMyMzU5NTlaMIGdMQswCQYDVQQGEwJERTEOMAwGA1UE
ERMFMjIyOTcxEDAOBgNVBAgTB0hhbWJ1cmcxEDAOBgNVBAcTB0hhbWJ1cmcxGDAW
BgNVBAkTD1VlYmVyc2VlcmluZyAxODEUMBIGA1UEChMLVGNoaWJvIEdtYkgxDjAM
BgNVBAsTBUlUTy1JMRowGAYDVQQDExFvd2EudGNoaWJvLmNvbS5oazCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALpy1cUs2yHJ/mz+SviilC0+hyV2TBw1
oPjHkATndrM6AfshgcKxVTHjlPGG7T7C6ehcl6q7fFQLrKA8m1b+isi7NADL8Xdg
8nAzxLm5HXug9A/FyMgAgg4d2dEtpiYLphoA1VJkd9uH7NpIhX6snnIevGyszye/
d98aSBqOcDSil+vcTIbfzR3jWwReF6loiOQEruEO/MdUrznh14ondikOEhOipN+A
IH761m9/AZ28Slnj3TDC21IGATXYbPTF8ErDIIj6HURrKmWPrwhj6m8BKZiphR+T
RabZ539+p0CNIGe8FsCIOqMpNG9aHEsexjG1ZN7oSAjvnqvT12i/WFG3RZ9qa4j6
yS3DKqs5Pc+AnLtmb+K0nTw553xb9QW4mkkYRhS/vYVseb7GftSOqlroj+RDiqAN
eSM+Yy947WM1ZXrQK2l2hMydeVkrQKugOHfwqnmzo4VGPTJ4L2WLPS0mdtfjCcjK
Rqdcp2gw7fbL2PqdefeN0sHsbKnkZCtRxU/vumcot/T+SR8Behlbzu1FdNJFJgT0
zoPFUjrvZwtqCFIfLP425p3Xal9MejviMIrmN8pQaRsFZ3CxqphNHTyityLHACOS
olDCIuY6CVQGshsLwxdNxSjo9dr++maEpbwgk00i2A4yIjePhaRNd3XXLyM+9Lm7
vZcnDAg4E94rAgMBAAGjggNJMIIDRTAfBgNVHSMEGDAWgBTyu1Xu/I/P0D8UaBqV
fnkOqxcw9DAdBgNVHQ4EFgQU57ly1FxG/hJCqBUmKg3sJpDmITMwDgYDVR0PAQH/
BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMEsGA1UdIAREMEIwNgYLKwYBBAGyMQECAggwJzAlBggrBgEFBQcCARYZaHR0
cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgIwUAYDVR0fBEkwRzBFoEOg
QYY/aHR0cDovL2NybC51c2VydHJ1c3QuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZp
Y2F0ZUF1dGhvcml0eTUuY3JsMIGCBggrBgEFBQcBAQR2MHQwSwYIKwYBBQUHMAKG
P2h0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9UcnVzdGVkU2VjdXJlQ2VydGlmaWNh
dGVBdXRob3JpdHk1LmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRy
dXN0LmNvbTCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AH0+8viP/4hVaCTCwMqe
Uol5K8UOeAl/LmqXaJl+IvDXAAABcQXBa9sAAAQDAEYwRAIgLcaxbUxoPGtB0ubH
wDXgXkS6B1He7NEWU0MAOD6rxrkCIC1yQmUJzgIGodH85Vl7PJZJFwlEIOm5qQMn
tAwasvVNAHUAlCC8Ho7VjWyIcx+CiyIsDdHaTV5sT5Q9YdtOL1hNosIAAAFxBcFs
iwAABAMARjBEAiByHldzxeOJ/bbeUjYp7BY2S7VBgyXPte1Ytckh/FhPMQIgRaaw
MwKztbyTiXLWyV8Ki/0nE+gQyBYKQBkxicNvh6kwgZsGA1UdEQSBkzCBkIIRb3dh
LnRjaGliby5jb20uaGuCHmF1dG9kaXNjb3Zlci5oay50Y2hpYm9yb290Lm5ldIIa
YXV0b2Rpc2NvdmVyLnRjaGliby5jb20uaGuCEWV3cy50Y2hpYm8uY29tLmhrghVv
d2EuaGsudGNoaWJvcm9vdC5uZXSCFXd3dy5vd2EudGNoaWJvLmNvbS5oazANBgkq
hkiG9w0BAQsFAAOCAQEAIBpOqyVk7Ssb2aOmZpnHVrhAqxR8kD8kRVB9r0sgtqzz
5K9+1NOcCCwBXf0Y0C7dlD0+/puMAP+LcqIPxIUy1lEXWYHqYm3A39rJuW1UfiWs
mFe+CoXH/ZTC6EsxAzNwrogLvTb/5UZKcMcGCj3vM3FJweiIlNtZy0nIyjNmFe/x
YM/eVdTip90TgX82Qq1rNJAxCnkO0ACcgZr+/gWxB3ni6DPCMtEhubvoTGJEwrVS
qrFmiX/uBkQn8059P/ir7t8NUPCsJPCJ9CECVSoI4cJJACTyam4EMUfKYUvJF25h
dZ+lAlU6twFy7wCQljtT9SJhO2xIvu1npTiC0bvkNg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAunLVxSzbIcn+bP5K+KKU
LT6HJXZMHDWg+MeQBOd2szoB+yGBwrFVMeOU8YbtPsLp6FyXqrt8VAusoDybVv6K
yLs0AMvxd2DycDPEubkde6D0D8XIyACCDh3Z0S2mJgumGgDVUmR324fs2kiFfqye
ch68bKzPJ7933xpIGo5wNKKX69xMht/NHeNbBF4XqWiI5ASu4Q78x1SvOeHXiid2
KQ4SE6Kk34AgfvrWb38BnbxKWePdMMLbUgYBNdhs9MXwSsMgiPodRGsqZY+vCGPq
bwEpmKmFH5NFptnnf36nQI0gZ7wWwIg6oyk0b1ocSx7GMbVk3uhICO+eq9PXaL9Y
UbdFn2priPrJLcMqqzk9z4Ccu2Zv4rSdPDnnfFv1BbiaSRhGFL+9hWx5vsZ+1I6q
WuiP5EOKoA15Iz5jL3jtYzVletAraXaEzJ15WStAq6A4d/CqebOjhUY9MngvZYs9
LSZ21+MJyMpGp1ynaDDt9svY+p15943SwexsqeRkK1HFT++6Zyi39P5JHwF6GVvO
7UV00kUmBPTOg8VSOu9nC2oIUh8s/jbmnddqX0x6O+IwiuY3ylBpGwVncLGqmE0d
PKK3IscAI5KiUMIi5joJVAayGwvDF03FKOj12v76ZoSlvCCTTSLYDjIiN4+FpE13
ddcvIz70ubu9lycMCDgT3isCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287343583127240858129571388339553469886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '22297'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ueberseering 18'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tchibo GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITO-I'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.tchibo.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760643820438265394373906353686255014881796203093562181152280239444574503633967797695770957216637015505823060437427793905836798744163855982252549314193520456148297739472328610272832395167227924655126499265202899284993604307386989045147219605457059598777874360995466101086514635712919725644074876606182456562616814528345142370230697560769907382030176300308523148434832499915091377000173359609234469183563747696800782187830916598109158917121274178491719063650593831366372931189952223762146049638484495649610584290365563960999430284659219386100057242332993839954339837029087895209563131921328573699057782149807541493472396074762550015648704266459049461998309505155094761422682065495513397221827892750161312386400390470653082225587586532525942628668469040215913196637308096077962709656064012207477086586585793795023963854836270991357639068575966645549275844638701432948155152949251184189340639244140431338327723835399603900779804253004132970948531681591382197857655279693076150023099991146813307239974623569268824390264496104853263739897972031093042623231321054395268051451002155661851707758843925923148007017050555335669248797243758305519220095212729255758172088415415575873959247893132088575424176488361886008969140023096669050596744747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7b972d45c46fe1242a815262a0dec2690e62133
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017105c16bdb000004030046304402202dc6b16d4c683c6b41d2e6c7c035e05e44ba0751deecd116534300383eabc6b902202d72426509ce0206a1d1fce5597b3c964917094420e9b9a90327b40c1ab2f54d0075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017105c16c8b00000403004630440220721e5773c5e389fdb6de523629ec16364bb5418325cfb5ed58b5c921fc584f31022045a6b03302b3b5bc938972d6c95f0a8bfd2713e810c8160a40193189c36f87a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.tchibo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hk.tchiboroot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tchibo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ews.tchibo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.hk.tchiboroot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.owa.tchibo.com.hk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00201a4eab2564ed2b1bd9a3a66699c756b840ab147c903f2445507daf4b20b6acf3e4af7ed4d39c082c015dfd18d02edd943d3efe9b8c00ff8b72a20fc48532d651175981ea626dc0dfdac9b96d547e25ac9857be0a85c7fd94c2e84b31033370ae880bbd36ffe5464a70c7060a3def337149c1e88894db59cb49c8ca336615eff160cfde55d4e2a7dd13817f3642ad6b3490310a790ed0009c819afefe05b10779e2e833c232d121b9bbe84c6244c2b552aab166897fee064427f34e7d3ff8abeedf0d50f0ac24f089f42102552a08e1c2490024f26a6e043147ca614bc9176e61759fa502553ab70172ef0090963b53f522613b6c48beed67a53882d1bbe436