*.bsgroup.com.hk
- Bright Smart Securities International (H.K.) Limited -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number ac:6f:14:2e:b1:84:00:a3:20:7c:a7:cc:d6:bf:0b:13 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Bright Smart Securities International (H.K.) Limited
Organization:
Bright Smart Securities International (H.K.) Limited
Address:
10 & 23/F WING ON HSE
Locality: Hong Kong
Country: HK
Locality: Hong Kong
Country: HK
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): ac:6f:14:2e:b1:84:00:a3:20:7c:a7:cc:d6:bf:0b:13Serial Number (int): 229203969573928872651517130343358335763
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: a9:15:e1:26:47:5e:78:8f:21:a5:35:10:f5:46:a7:ad:3e:5c:42:75
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 93:bd:59:dd:a6:d8:4f:14:27:64:c4:93:d5:1f:10:05:09:8a:cc:a0
Fingerprint (sha256): 62:ba:f9:ae:1e:78:93:b2:68:f3:3a:c7:ca:93:4e:4b:9b:5d:91:e5:98:d5:ef:be:5f:e6:fb:78:07:0c:bd:3c
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate *.bsgroup.com.hk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bsgroup.com.hk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bsgroup.com.hk
bsgroup.com.hk
bsgroup.com.hk
Other certificates including the domain name bsgroup.com.hk
(limited to 100 certificates)
*.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
china.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
bss2.bsgroup.com.hk
pps.bsgroup.com.hk
bss3.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
ssl808847.cloudflaressl.com
bss2.bsgroup.com.hk
ppsbsg.bsgroup.com.hk
membership.bsgroup.com.hk
www.bsgroup.com.hk
HiSpeedMobile.bsgroup.com.hk
sni.cloudflaressl.com
ppsbsg.bsgroup.com.hk
pps.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
sni.cloudflaressl.com
*.bsgroup.com.hk
sni.cloudflaressl.com
*.bsgroup.com.hk
membership.bsgroup.com.hk
www.bsgroup.com.hk
mobilef.bsgroup.com.hk
pps.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
china.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
bss2.bsgroup.com.hk
pps.bsgroup.com.hk
bss3.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
ssl808847.cloudflaressl.com
bss2.bsgroup.com.hk
ppsbsg.bsgroup.com.hk
membership.bsgroup.com.hk
www.bsgroup.com.hk
HiSpeedMobile.bsgroup.com.hk
sni.cloudflaressl.com
ppsbsg.bsgroup.com.hk
pps.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
sni.cloudflaressl.com
*.bsgroup.com.hk
sni.cloudflaressl.com
*.bsgroup.com.hk
membership.bsgroup.com.hk
www.bsgroup.com.hk
mobilef.bsgroup.com.hk
pps.bsgroup.com.hk
*.bsgroup.com.hk
*.bsgroup.com.hk
Certificate
The complete raw certificate details for *.bsgroup.com.hk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIRAKxvFC6xhACjIHynzNa/CxMwDQYJKoZIhvcNAQELBQAw gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0yMDEwMjMwMDAwMDBaFw0yMTExMjMyMzU5NTlaMIGbMQswCQYD VQQGEwJISzESMBAGA1UEBxMJSG9uZyBLb25nMR4wHAYDVQQJDBUxMCAmIDIzL0Yg V0lORyBPTiBIU0UxPTA7BgNVBAoTNEJyaWdodCBTbWFydCBTZWN1cml0aWVzIElu dGVybmF0aW9uYWwgKEguSy4pIExpbWl0ZWQxGTAXBgNVBAMMECouYnNncm91cC5j b20uaGswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QiUE9OrwMprZ 8XKBMamTRv4LLK5sWBKQCd++GiQeJ8neJq7zYN2KBVle3dBRR4ohm1IMZ2JxANqo v4XxVTElutpu7r9KMxsuzgKUIJ8GeILWfCQCqqYkXaP5D2lEn0wG65NbqwQZ8vbZ 7vSJDLH159GKywL3h8T24YVfPUaiE+G77mYIBbSr7an6HdIUbZ2taJAU1dNuOwWG evosYSrtdjjEt+xPWzxa7IU1ueEKAa3FVQrrJ9YM40sCYQQ/Az6xlqyC2xSD2KJ1 MqtEnlt9UYvpUBuYcugPxjNrbkuWIpZKWNz7e5tDMV2cQd4yJZNZJeUyT8GX1KR+ OUNr1FIHAgMBAAGjggLrMIIC5zAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJQ9kwNkSM bKlP6zAdBgNVHQ4EFgQUqRXhJkdeeI8hpTUQ9UanrT5cQnUwDgYDVR0PAQH/BAQD AgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEWF2h0dHBz Oi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklo dHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxp ZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHwwVQYIKwYB BQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXph dGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0 dHA6Ly9vY3NwLnNlY3RpZ28uY29tMCsGA1UdEQQkMCKCECouYnNncm91cC5jb20u aGuCDmJzZ3JvdXAuY29tLmhrMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAfT7y +I//iFVoJMLAyp5SiXkrxQ54CX8uapdomX4i8NcAAAF1U2mAqgAABAMARzBFAiAQ HbFb7EiutwoCzQUqS74/3FWsgdmTVOMc+SG1iR7IPQIhAMAa9auEZos/WIOI5Iwa hw+RWgVikdmPaITEwfz6m+gAAHYAlCC8Ho7VjWyIcx+CiyIsDdHaTV5sT5Q9YdtO L1hNosIAAAF1U2mA0gAABAMARzBFAiEAw4M7hYaMQX4vbleCH/XBsCrN/qIRY+yK rQtrby/1To4CICQyWNargdoKZfF6LyYBHzxLsmCtlZurbGvAfxMhGE2JMA0GCSqG SIb3DQEBCwUAA4IBAQBkLkJ/ZUWqGyi+qIt+KPftn3eNtsRPybtdZKfxErkUchf7 wfmUL2YylaOy/RsTnv+rT+r772JsqUFwMjX74GfdxnmsZyOTQQaOcAv+qyXP4gmN fNSJg9pYYWPyn4iidqBmhu9ekiVtXjj1s6RS/TisDHOLgNjN2bMhbqrWf0GgZ+3z VQh8Q3hv2PQtn1hvhNQ2voevVSzD/G1c42NvpYZhxFykdoFBDZl0qt6v+a4FggKw zTqvLKHNTM5EByteYDcYHSeFX7wkjb+AEilnFF5t7nu2/Lgs5NoSDW5awZ+7iZvF 60Shq+bYgPWZMca+uLC0tLONN8r6TroDnPp+mgQQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkIlBPTq8DKa2fFygTGp k0b+CyyubFgSkAnfvhokHifJ3iau82DdigVZXt3QUUeKIZtSDGdicQDaqL+F8VUx Jbrabu6/SjMbLs4ClCCfBniC1nwkAqqmJF2j+Q9pRJ9MBuuTW6sEGfL22e70iQyx 9efRissC94fE9uGFXz1GohPhu+5mCAW0q+2p+h3SFG2drWiQFNXTbjsFhnr6LGEq 7XY4xLfsT1s8WuyFNbnhCgGtxVUK6yfWDONLAmEEPwM+sZasgtsUg9iidTKrRJ5b fVGL6VAbmHLoD8Yza25LliKWSljc+3ubQzFdnEHeMiWTWSXlMk/Bl9SkfjlDa9RS BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 229203969573928872651517130343358335763 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '10 & 23/F WING ON HSE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bright Smart Securities International (H.K.) Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bsgroup.com.hk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24017895064862097208373999155704805343955222456513616172656882833429140238935411777608090901503011791305392337707019270540187623786467395770797950453650728412579386775649223886898868835267503701408179476078336011897751249052814113161706816850562677007724517244494253454052184757256637300771074953527461297707488550408755635377301083665170028269259201940845499765227960140955188390582462981328032979122156394812776890212325681139737231242382718484574335369600106579363953384925856569190607345303452494958086591525137931852263515935969401523379504892167813998538473244271154575207752362737692089417618465842165982712327 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a915e126475e788f21a53510f546a7ad3e5c4275 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsgroup.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsgroup.com.hk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000175536980aa00000403004730450220101db15bec48aeb70a02cd052a4bbe3fdc55ac81d99354e31cf921b5891ec83d022100c01af5ab84668b3f588388e48c1a870f915a056291d98f6884c4c1fcfa9be8000076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000175536980d20000040300473045022100c3833b85868c417e2f6e57821ff5c1b02acdfea21163ec8aad0b6b6f2ff54e8e0220243258d6ab81da0a65f17a2f26011f3c4bb260ad959bab6c6bc07f1321184d89 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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