www.ckh.com.hk
Issued by Trusted Secure Certificate Authority DV
About this certificate
This digital certificate with serial number 4c:f8:2d:83:70:89:4e:76:82:e8:91:ad:bf:b6:c5:14 was issued on by Corporation Service Company.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ckh.com.hk
Corporation Service Company
Organization:
Corporation Service Company
State / Province:
DE
Locality: Wilmington
Country: US
Locality: Wilmington
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 4c:f8:2d:83:70:89:4e:76:82:e8:91:ad:bf:b6:c5:14Serial Number (int): 102309940422720011754374468070641419540
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: be:65:29:4b:8b:ec:4d:78:a0:84:78:bd:2e:cf:2f:ad:c6:a8:73:96
AuthorityKeyId: 04:59:49:2a:41:5b:9e:0b:23:3a:ee:e7:76:72:59:ac:3c:4c:5a:33
Fingerprint (sha1): 87:78:fc:01:68:c9:d3:f5:14:93:6a:e7:0b:b0:c6:c4:7e:a8:52:5d
Fingerprint (sha256): 64:a7:1b:a2:bf:00:dd:e3:f9:29:e6:1c:ae:2c:1f:9f:c7:ba:56:21:0b:e9:85:51:76:43:0e:22:41:a2:cd:e9
Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthorityDV.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthorityDV.crl
Check the revocation status for certificate www.ckh.com.hk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ckh.com.hk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ckh.com.hk
ckh.com.hk
ckh.com.hk
Other certificates including the domain name ckh.com.hk
(limited to 100 certificates)
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mail2.ckh.com.hk
m1.ckh.com.hk
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
emf2.ckh.com.hk
mail2.ckh.com.hk
pqmx.ckh.com.hk
sni.cloudflaressl.com
mail1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
logon2.ckh.com.hk
mail2.ckh.com.hk
sni.cloudflaressl.com
guest.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
mailgw.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
m1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
mail2.ckh.com.hk
www.ckh.com.hk
ckh.com.hk
sni.cloudflaressl.com
logon.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
emf2.ckh.com.hk
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
mail.hwl.com
guest.ckh.com.hk
vpn1.ckh.com.hk
guest.ckh.com.hk
*.spapps02.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
mail1.ckh.com.hk
vpn3.ckh.com.hk
mail1.ckh.com.hk
mail.hwl.com
sni.cloudflaressl.com
mdm1.ckh.com.hk
sni.cloudflaressl.com
mailgw.ckh.com.hk
logon.ckh.com.hk
pqmx.ckh.com.hk
ckh.com.hk
mailgw.ckh.com.hk
mail1.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
mail2.ckh.com.hk
m1.ckh.com.hk
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
emf2.ckh.com.hk
mail2.ckh.com.hk
pqmx.ckh.com.hk
sni.cloudflaressl.com
mail1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
logon2.ckh.com.hk
mail2.ckh.com.hk
sni.cloudflaressl.com
guest.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
mailgw.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
m1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
mail2.ckh.com.hk
www.ckh.com.hk
ckh.com.hk
sni.cloudflaressl.com
logon.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
emf2.ckh.com.hk
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
mail.hwl.com
guest.ckh.com.hk
vpn1.ckh.com.hk
guest.ckh.com.hk
*.spapps02.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
mail1.ckh.com.hk
vpn3.ckh.com.hk
mail1.ckh.com.hk
mail.hwl.com
sni.cloudflaressl.com
mdm1.ckh.com.hk
sni.cloudflaressl.com
mailgw.ckh.com.hk
logon.ckh.com.hk
pqmx.ckh.com.hk
ckh.com.hk
mailgw.ckh.com.hk
mail1.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
Certificate
The complete raw certificate details for www.ckh.com.hk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIQTPgtg3CJTnaC6JGtv7bFFDANBgkqhkiG9w0BAQsFADCB hzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkRFMRMwEQYDVQQHEwpXaWxtaW5ndG9u MSQwIgYDVQQKExtDb3Jwb3JhdGlvbiBTZXJ2aWNlIENvbXBhbnkxMDAuBgNVBAMT J1RydXN0ZWQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSBEVjAeFw0yMzAx MDgwMDAwMDBaFw0yNDAxMDgyMzU5NTlaMBkxFzAVBgNVBAMTDnd3dy5ja2guY29t LmhrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDbBvr7UJSRXNTzE 9NZq5expRD72G0VB2Sk31fNuNqYF0VLGGloQY1+xzlvDzg+QjevMOrSz/uAjqACY 8TvCzuPKX32oMylK/MiN83q8XNFleyzlg7H9VMWZe8Ne4q88n2r4CDU5mc4FBk7w G/loxTvtaBfiONNwQdZf+CPsqscZrag1uBLZVXbdUwzeoIItifr7sjUnfcOqNvgJ 0m6Bd0JoODZ66hvj9cNo6/tZMSsJLtO8eElFgb5N7VWrPmx2UOyWIbFtZXWhn96o mNE0ni8VlwlyqqkBAhoZ502aZPBMf1PJuZC4vmtzIoG0fUw/QWHXFfjmMDD5VXkA qkg8QQIDAQABo4IDUTCCA00wHwYDVR0jBBgwFoAUBFlJKkFbngsjOu7ndnJZrDxM WjMwHQYDVR0OBBYEFL5lKUuL7E14oIR4vS7PL63GqHOWMA4GA1UdDwEB/wQEAwIF oDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBL BgNVHSAERDBCMDYGCysGAQQBsjEBAgIIMCcwJQYIKwYBBQUHAgEWGWh0dHBzOi8v Y3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQIBMFEGA1UdHwRKMEgwRqBEoEKGQGh0 dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9UcnVzdGVkU2VjdXJlQ2VydGlmaWNhdGVB dXRob3JpdHlEVi5jcmwwgYMGCCsGAQUFBwEBBHcwdTBMBggrBgEFBQcwAoZAaHR0 cDovL2NydC51c2VydHJ1c3QuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZpY2F0ZUF1 dGhvcml0eURWLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0 LmNvbTAlBgNVHREEHjAcgg53d3cuY2toLmNvbS5oa4IKY2toLmNvbS5oazCCAX8G CisGAQQB1nkCBAIEggFvBIIBawFpAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhC Cp/mZ0xaOnQAAAGFk539lwAABAMASDBGAiEA/HBfhCrBK0aNyNdUWnC7uerSvT17 SSlLjUCkD//J9FMCIQDBrBweNcGy49KdyKTk+Q10+j6sG9Z/EEY0J9NxbDem0AB2 ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABhZOd/WgAAAQDAEcw RQIhALaB/UEByEIWOVC0cDYZhKSsc3mQNE29SuN6lxGCRr9nAiArr8H42ULZbJ3Y NTkRZxTXdSeVJjx4uIjLLSKrWDbyggB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOze w1FIWUZxH7WbAAABhZOd/TEAAAQDAEcwRQIhAJi4tRQ5DtdjKjBzNXX4NmADvoff Z8IE94RFL01GchJqAiAPtlY/3LbUpW/r479HMlh6TAoEkWC5QH8JMsYjHCG5hDAN BgkqhkiG9w0BAQsFAAOCAQEAbcH7nIc530Wz/9bJ76snAIvXwvvmgHQ3fFtibWTU Am+BI1HtMY2TwqdrEOpPbodeXTH4usyeD9fGH8bHC4tiTT1pERjOYGDYDhGij/b5 Lquxr01iB+V1C47VAvDI9bcyZvSxvftt61PWUvWXRoIK3qiNxs27hFMmGQPrHzBB WfqnBl5VtVJyUBvnHi0lJ7np90Buzz/cOJAiL42C/s4BIveA7xmBVnclGVTN9Dyj y3z4CM7QlysoPnltjeETNHpe14M7FNY4B3ZngtIzPKjwD2xkhmIE9qoW+2iW0Xse mUj6TGFQ2L3lEw4EauNCxthJ/BUS8zLWRYLlBaBS9rV/gg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDbBvr7UJSRXNTzE9NZq 5expRD72G0VB2Sk31fNuNqYF0VLGGloQY1+xzlvDzg+QjevMOrSz/uAjqACY8TvC zuPKX32oMylK/MiN83q8XNFleyzlg7H9VMWZe8Ne4q88n2r4CDU5mc4FBk7wG/lo xTvtaBfiONNwQdZf+CPsqscZrag1uBLZVXbdUwzeoIItifr7sjUnfcOqNvgJ0m6B d0JoODZ66hvj9cNo6/tZMSsJLtO8eElFgb5N7VWrPmx2UOyWIbFtZXWhn96omNE0 ni8VlwlyqqkBAhoZ502aZPBMf1PJuZC4vmtzIoG0fUw/QWHXFfjmMDD5VXkAqkg8 QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 102309940422720011754374468070641419540 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority DV' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ckh.com.hk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19720177167429506793685628351756430875743447196721382526575380334961377594320040345431564627907319506690906599854191845115448424495126385985166696880216815028239014077790672127596968596303137083203600278942618752641541870805187273950227335299524448101334820368245759432836108943099589185133071078818435331349099916436760104052960116376586425874471760319996058165209329725209535217747081615047051148373406901590240352345857907220326684782410505323006807693277525748828889549294566780710396634119196933953453401854293982311169754515342935094070658552329575654349699101598655812393927759924719822718922519300827209284673 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0459492a415b9e0b233aeee7767259ac3c4c5a33 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) be65294b8bec4d78a08478bd2ecf2fadc6a87396 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthorityDV.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthorityDV.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ckh.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckh.com.hk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185939dfd970000040300483046022100fc705f842ac12b468dc8d7545a70bbb9ead2bd3d7b49294b8d40a40fffc9f453022100c1ac1c1e35c1b2e3d29dc8a4e4f90d74fa3eac1bd67f10463427d3716c37a6d0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000185939dfd680000040300473045022100b681fd4101c842163950b470361984a4ac737990344dbd4ae37a97118246bf6702202bafc1f8d942d96c9dd83539116714d7752795263c78b888cb2d22ab5836f282007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185939dfd31000004030047304502210098b8b514390ed7632a30733575f8366003be87df67c204f784452f4d4672126a02200fb6563fdcb6d4a56febe3bf4732587a4c0a049160b9407f0932c6231c21b984 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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