resource.leagcard.com

- China Unionpay Data Services Co., Ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:fa:23:72:b9:7d:1a:f3:c9:02:a5:11:25:5a:51:9d was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd

Organization: China Unionpay Data Services Co., Ltd
Organization unit: Innovation Business Dept.
Locality: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:fa:23:72:b9:7d:1a:f3:c9:02:a5:11:25:5a:51:9d
Serial Number (int): 17249529137805321639549984351230513565
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 58:3b:de:99:6d:68:6b:c9:38:4c:3b:e6:87:6e:a6:9e:92:48:8a:53
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 5c:33:fb:07:cd:5f:ee:3b:2f:18:0a:4b:a3:21:4c:38:b2:fb:43:4a
Fingerprint (sha256): 7d:1a:13:a9:f5:b2:0b:00:ca:b1:7f:e7:6a:73:0f:dc:be:86:17:c8:26:22:fd:f7:5f:e2:16:9f:d7:41:3d:ae

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://ocsp1.digicert.com
CRL Distribution Point: http://cdp1.digicert.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate resource.leagcard.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resource.leagcard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resource.leagcard.com
creditcard.klb.cn
shop.fjnx.com.cn

Other certificates including the domain name leagcard.com

(limited to 100 certificates)
web.cupdata.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
app.cupdapp.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
passort.leagcard.com
web.cupdata.com
passort.leagcard.com
prepaidcard.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
web.cupdata.com
resource.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
app.cupdapp.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
*.leagcard.com
onlinepay.cupdata.com
resource.leagcard.com
passort.leagcard.com
mall.rong-data.com
passort.leagcard.com
app.cupdapp.com
mall.rong-data.com
mall.rong-data.com
prepaidcard.leagcard.com
mall.rong-data.com
resource.leagcard.com
prepaidcard.leagcard.com
prepaidcard.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
passort.leagcard.com
passort.leagcard.com
resource.leagcard.com
prepaidcard.leagcard.com
*.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
*.leagcard.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
prepaidcard.leagcard.com
passort.leagcard.com
*.leagcard.com
resource.leagcard.com
mall.rong-data.com
mall.rong-data.com
web.cupdata.com

Certificate

The complete raw certificate details for resource.leagcard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIQDPojcrl9GvPJAqURJVpRnTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xNzEyMTkwMDAwMDBaFw0yMDEyMTgxMjAwMDBaMIGUMQswCQYDVQQGEwJDTjER
MA8GA1UEBxMIU2hhbmdoYWkxLjAsBgNVBAoTJUNoaW5hIFVuaW9ucGF5IERhdGEg
U2VydmljZXMgQ28uLCBMdGQxIjAgBgNVBAsTGUlubm92YXRpb24gQnVzaW5lc3Mg
RGVwdC4xHjAcBgNVBAMTFXJlc291cmNlLmxlYWdjYXJkLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAJliqY5rRllNtZZxG+hjRyMmMXjHhDh0mmjF
5QYfUKauVD5d6x4St0yMlk/NoXyaylkxexG+E2VvAoZI4+C+fpDIMdcKDTyo4EKy
p9LIRSnoCchWJtkiwgkP+IByAnNkFVR3T59tgOLj4sjuG/t9cEx/vsHzveCoo/oG
JfuRb+LH8Gghi7jD9wQphKWBw8IG1VllEAWNyrTecnzqNloQv4ZnikKrJwDBn5V/
9cBZZFmaEQa6jZwVAP1dcGaXB8rg7p+wBIFTzWkmKa/3+wimjELr5jTT4/7Ru3wl
G64sNZBJ3GrgtxwWg8DA66AddFm0+mBvN/Vu0Blb4608I+5FNH8CAwEAAaOCAcow
ggHGMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBRY
O96ZbWhryThMO+aHbqaekkiKUzBFBgNVHREEPjA8ghVyZXNvdXJjZS5sZWFnY2Fy
ZC5jb22CEWNyZWRpdGNhcmQua2xiLmNughBzaG9wLmZqbnguY29tLmNuMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPwYDVR0f
BDgwNjA0oDKgMIYuaHR0cDovL2NkcDEuZGlnaWNlcnQuY29tL0dlb1RydXN0UlNB
Q0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB
FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB0BggrBgEF
BQcBAQRoMGYwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwMS5kaWdpY2VydC5jb20w
PQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVz
dFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAtkFr
bNhJhb73TJbpGgfqqMyZzUJFMtHn+w7h80fpyQwpwhn+PE7ombnMGMD1sS3FSc1j
53KsnqqkAXT+lyjxhTS46XcAQhmWGf6wdN46wpDnaEc73qEypPYpltFDTgmaFzrC
3SbtYdUoS05SVErzcGxh5tvMIW9TT7l7N+ovKTds51t8z9TsCUzrYkXreEzrzpH9
xI7UNJKZC922QDHqSIkeLwiOz0a9hjssM3e3w9Jfas5VV5GDX8XZEu8K0jd+onMO
rrgbymzsZ4uuv517MAPNQUw0TFOPQfwXyCbuefaSeQNPf9aSCbAn2oqkG23H3tVC
2UbFQlLKz/YRQcAe+g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWKpjmtGWU21lnEb6GNH
IyYxeMeEOHSaaMXlBh9Qpq5UPl3rHhK3TIyWT82hfJrKWTF7Eb4TZW8Chkjj4L5+
kMgx1woNPKjgQrKn0shFKegJyFYm2SLCCQ/4gHICc2QVVHdPn22A4uPiyO4b+31w
TH++wfO94Kij+gYl+5Fv4sfwaCGLuMP3BCmEpYHDwgbVWWUQBY3KtN5yfOo2WhC/
hmeKQqsnAMGflX/1wFlkWZoRBrqNnBUA/V1wZpcHyuDun7AEgVPNaSYpr/f7CKaM
QuvmNNPj/tG7fCUbriw1kEncauC3HBaDwMDroB10WbT6YG839W7QGVvjrTwj7kU0
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17249529137805321639549984351230513565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Innovation Business Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resource.leagcard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19363112867722846479667245130616052182181656495133558518274330506638484398565343761975281172244339677316711035031463139607870934420307971627691127071616607007621889857508913927320896719600919434440771486942196334186947670862524560206178878720642971601990200837107712824483636426760210301503239622852473839892207228854321674342737719853457281234180804199214906053827588243129581946222383795616316000294733705642702256376905724999778063351512405423313462692073153396933677790298461561548389444167849020756024950234672284621443758467072983426765115282482057913415771090056536428269680384042433620838981287917049300202623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							583bde996d686bc9384c3be6876ea69e92488a53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.klb.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fjnx.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.digicert.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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