tms.data.hsbc.com

- HSBC Group Management Services Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 53:74:92:a1:6c:83:6d:a0:f9:7a:57:ec:19:3d:f4:85 was issued on by Entrust, Inc..

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HSBC Group Management Services Limited

Organization: HSBC Group Management Services Limited
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:74:92:a1:6c:83:6d:a0:f9:7a:57:ec:19:3d:f4:85
Serial Number (int): 110931204106857623446843018399891453061
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 83:cd:6c:60:e5:2e:46:71:a9:7b:f2:5f:59:af:9f:84:95:f8:9f:83
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): cc:c7:19:4c:98:03:9b:e5:75:3d:9f:a5:49:b6:19:1c:72:82:10:77
Fingerprint (sha256): 78:73:8a:00:07:bd:d6:db:06:51:93:d2:ff:cc:c4:0f:07:21:75:c3:cf:49:68:4b:19:22:76:09:b3:f1:f0:02

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate tms.data.hsbc.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tms.data.hsbc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tms.data.hsbc.com
tms.data.firstdirect.com
tms.data.hangseng.com
tms.data.hsbc.ae
tms.data.hsbc.am
tms.data.hsbc.be
tms.data.hsbc.bm
tms.data.hsbc.ca
tms.data.hsbc.ch
tms.data.hsbc.cl
tms.data.hsbc.co.id
tms.data.hsbc.co.il
tms.data.hsbc.co.in
tms.data.hsbc.co.jp
tms.data.hsbc.co.kr
tms.data.hsbc.co.mu
tms.data.hsbc.co.nz
tms.data.hsbc.co.om
tms.data.hsbc.co.th
tms.data.hsbc.co.uk
tms.data.hsbc.co.za
tms.data.hsbc.com.ar
tms.data.hsbc.com.au
tms.data.hsbc.com.bd
tms.data.hsbc.com.bh
tms.data.hsbc.com.br
tms.data.hsbc.com.cn
tms.data.hsbc.com.eg
tms.data.hsbc.com.hk
tms.data.hsbc.com.kw
tms.data.hsbc.com.mo
tms.data.hsbc.com.mt
tms.data.hsbc.com.mx
tms.data.hsbc.com.my
tms.data.hsbc.com.ph
tms.data.hsbc.com.qa
tms.data.hsbc.com.sg
tms.data.hsbc.com.tr
tms.data.hsbc.com.tw
tms.data.hsbc.com.uy
tms.data.hsbc.com.vn
tms.data.hsbc.cz
tms.data.hsbc.de
tms.data.hsbc.es
tms.data.hsbc.fr
tms.data.hsbc.gr
tms.data.hsbc.ie
tms.data.hsbc.it
tms.data.hsbc.lk
tms.data.hsbc.lu
tms.data.hsbc.nl
tms.data.hsbc.pl
tms.data.hsbc.ru
tms.data.hsbc.se
tms.data.hsbc.uk
tms.data.hsbcamanah.com.my
tms.data.hsbcnet.com
tms.data.hsbcqh.com.cn

Other certificates including the domain name hsbc.com

(limited to 100 certificates)
www2.prodlike-site2.security.p2g.netd2.hsbc.com.hk
www.us.hsbc.com
tx.fguk-dev.hsbc.com
ist.hsbcusa.netd.us.hsbc.com
demolp.hsbc.com
www.fxclientui2.gfx.gbm.hsbc.com
rdcweb.us.hsbc.com
www.hsbc.co.uk
HSBC.COM
www.security.online-banking.ciiom.hsbc.com
www.fundsinfo.hsbc.com.sg
mortgageapply-uat.us.hsbc.com
www.qatar.hsbc.com
www.business.hsbc.co.uk
DEV-EXT-mqipt1-usl00001177.mq.hsbc.com
www-origin.prod.eu.dynp.hsbc.com
www2.plte.file.online-banking.uk.hsbc.com
hsbc.com
demolp.hsbc.com
qa.hsbcnetna.netd.us.hsbc.com
www.connectionshub-staging.business.hsbc.com
www.hsbc.com.kw
bahrainservice.hsbc.com
payments.jo.personal-banking.hsbc.com
investments.ae.personal-banking.hsbc.com
PROD-EXT-MQIPT05-gbl12676.mq.hsbc.com
investments3.sg.personal-banking.hsbc.com
lp-gsde.plte.services.online-banking.uk.hsbc.com
investments.hk.personal-banking.hsbc.com
OV-PLC-Renew-Hongkong.hsbc.com
gtff.hsbc.com
www.pib.pa.hsbc.com
priipskids.gbm.hsbc.com
uaemail.hsbc.com
www.business.hsbc.co.uk
admin.apply.us.hsbc.com
HSBC.COM
confidentialreport-icm.hsbc.com
PROD_EXT_MQIPT01_HKP1Vl0340.mq.hsbc.com
customerservice.expat.hsbc.com
pelp.hsbc.com
www.assetmanagement.hsbc.com
ist.hsbcmortgageservices.netd.us.hsbc.com
payments.lb.personal-banking.hsbc.com
www.hsbc.com.lb
mraedge1.mra-emea.hsbc.com
ssl1.remote.us.hsbc.com
FTP-MAINFRAME.SYSTEMS.UK.HSBC.COM
www.us.hsbc.com
recognition.staff.hsbc.com
apply-dev.personal.hsbc.com
DFRLO2PCL.mq.hsbc.com
incidentboard.asiapacific.hsbc.com
www.apps.asiapacific.hsbc.com
cards.uk.personal-banking.hsbc.com
www.fundsinfo.hsbc.com.sg
skm.m.security.online-banking.expat.hsbc.com
preprod.connectedmoney.api.hsbc.com
wordingcollaboration.business.hsbc.com
www.hsbc.com.eg
ca-aem-vh-lp.us.hsbc.com
www.banking.us.hsbc.com
www.hsbc.co.om
www.file.online-banking.ciiom.hsbc.com
apply-test.personal.hsbc.com
static.lp.services.online-banking.us.hsbc.com
www.fileupload.asiapacific.hsbc.com
identify-uat.expat.hsbc.com
us-aem-vh-lp.us.hsbc.com
gtff2.hsbc.com
usl00000677.us.hsbc.com
wdc.lp.m.ciiom.hsbc.com
payments.gr.personal-banking.hsbc.com
tradetracker.business.hsbc.com
www.tech.hsbc
aoins.us.hsbc.com
uatlp.hsbc.com
EV-PLC-Reissue-blabla.hsbc.com
www.content.online-banking.ciiom.hsbc.com
ecom-as2encsign.fguk-dev.hsbc.com
qa1.hfc.netd.us.hsbc.com
upivodaprod.hsbc.com
www.crs.hsbc.com
PLFISHK02.mq.hsbc.com
ist.hsbcnet.netd.us.hsbc.com
www.expat.hsbc.com
cards.ciiom.personal-banking.hsbc.com
FXTRADING.US.HSBC.COM
www.hsbc.com.ph
tx.fguk.hsbc.com
www.security.online-banking.hsbc.com.mx
FTP-MAINFRAME.SYSTEMS.UK.HSBC.COM
HBUSPROD.MAINFRAME.HSBC.COM
investments.sg.personal-banking.hsbc.com
pfo.us.hsbc.com
FTP-MAINFRAME.SYSTEMS.UK.HSBC.COM
ciiom.hsbc.com
www.ist5.usbib.netd.hsbc.com
www.dddc.us.hsbc.com
www.ukgib-its.hsbc.com

Certificate

The complete raw certificate details for tms.data.hsbc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110931204106857623446843018399891453061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 11:01:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 11:01:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSBC Group Management Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tms.data.hsbc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 957979029117010402880782854372419076155596217447329191794623654662721887580486152633343310281116578841177892287970689543117742139175364679558198207312639142885048525595937109743628153497660211829750118372158344584040249850970240089599551965690686947890314167258687415235816989624950288407381506687825994779542152364861056943559740922375067813276534977148330007516561069874440184469131181780339488114325589822446507519973491151303433404049504583375828236661579301253286870138883898742254902847310635139810488176616954247148366095561761436318836626256875593696289892986445975806081451215517983560777635266671894623659652136402344406986634937463492761100027795847582345958478096658270202585433015505600424333934481312370748120301667182607748640239272105473344945228291636400789770767572612690238502086372743696062252783624787233025350741272915432255093074376079072547571310742275308297234972539740889074538400889519038376933227806943498650089332110813392125919980144557686611286137439571515707896052966747519281760444301743259504954405084200479235554019708945985422891708408179803824984145612325509922413392584352732259642335711687232227471370748878580591439704133559532970532660845301306497696635772532112659486879461313863707698512281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83cd6c60e52e4671a97bf25f59af9f8495f89f83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1195 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.firstdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hangseng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.bm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.mo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbc.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbcamanah.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbcnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.data.hsbcqh.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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