hkmdm.cicc.com.cn
- China International Capital Corporation Limited -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 04:52:3a:ae:11:af:34:7a:05:20:c8:0c:03:e1:73:ce was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
China International Capital Corporation Limited
Organization:
China International Capital Corporation Limited
Locality:
Central
Country: HK
Country: HK
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:52:3a:ae:11:af:34:7a:05:20:c8:0c:03:e1:73:ceSerial Number (int): 5743870496469863635358886768725291982
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 34:7d:91:7b:c5:4d:9d:58:92:cc:d8:7c:57:30:2f:2c:49:d4:9f:75
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 03:a2:34:be:5f:21:a5:9e:78:c5:f3:f3:79:6c:f9:d1:a9:55:5b:e1
Fingerprint (sha256): 9b:c8:13:5a:c4:40:b6:3e:93:3b:d4:1f:15:f7:c8:18:91:d9:76:68:40:aa:b1:04:fd:be:50:23:eb:f1:b2:43
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate hkmdm.cicc.com.cn
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hkmdm.cicc.com.cn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hkmdm.cicc.com.cn
hkmam.cicc.com.cn
hkras.cicc.com.cn
hkras2.cicc.com.cn
hkmam.cicc.com.cn
hkras.cicc.com.cn
hkras2.cicc.com.cn
Other certificates including the domain name cicc.com.cn
(limited to 100 certificates)
aitest.cicc.com.cn
hkmdm.cicc.com.cn
remotepchw.cicc.com.cn
ecc.cicc.com.cn
cicc.com.cn
jwkh.cicc.com.cn
mx09.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sf.cicc.com.cn
uras.cicc.com.cn
hksfatca.cicc.com.cn
ibanker.dev.cicc.com.cn
mx11.cicc.com.cn
vdi.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
mx10.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cloud.cicc.com.cn
osms.cicc.com.cn
ecrmapp.cicc.com.cn
ecounter.cicc.com.cn
spam05.cicc.com.cn
hksfatca.cicc.com.cn
wecom.cicc.com.cn
cloud.cicc.com.cn
ras.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cbeb.cicc.com.cn
ecrmapp.cicc.com.cn
km.cicc.com.cn
mx12.cicc.com.cn
cloud.cicc.com.cn
rms.cicc.com.cn
hcpanywhere.cicc.com.cn
cloud.cicc.com.cn
mx07.cicc.com.cn
sf.cicc.com.cn
ecounter.cicc.com.cn
jwkh.cicc.com.cn
hkm10.cicc.com.cn
sftest.cicc.com.cn
sip.cicc.com.cn
hkmdm.cicc.com.cn
cicc.com.cn
spam04.cicc.com.cn
cloud.cicc.com.cn
visitor.cicc.com.cn
jwkh.cicc.com.cn
jwkh.cicc.com.cn
spam01.cicc.com.cn
lbmam.cicc.com.cn
mx10.cicc.com.cn
mdm.cicc.com.cn
www.cicc.com.cn
cloudapp.cicc.com.cn
wrs.cicc.com.cn
hkfufatca.cicc.com.cn
mx08.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
jw.cicc.com.cn
ecounter.cicc.com.cn
mx12.cicc.com.cn
www.corporate-actions.cicc.com.cn
hkmdm.cicc.com.cn
spam02.cicc.com.cn
ras.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
cloud.cicc.com.cn
cloud.cicc.com.cn
cbeb.cicc.com.cn
ecounter.cicc.com.cn
cloud.cicc.com.cn
ecrmapp.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sts.cicc.com.cn
spam03.cicc.com.cn
ras.cicc.com.cn
ec.cicc.com.cn
sf.cicc.com.cn
tuoguan.cicc.com.cn
ecrmapp.cicc.com.cn
tuoguan.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
mx08.cicc.com.cn
ecounter.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
remotepc.cicc.com.cn
hkm10.cicc.com.cn
hkmdm.cicc.com.cn
remotepchw.cicc.com.cn
ecc.cicc.com.cn
cicc.com.cn
jwkh.cicc.com.cn
mx09.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sf.cicc.com.cn
uras.cicc.com.cn
hksfatca.cicc.com.cn
ibanker.dev.cicc.com.cn
mx11.cicc.com.cn
vdi.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
mx10.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cloud.cicc.com.cn
osms.cicc.com.cn
ecrmapp.cicc.com.cn
ecounter.cicc.com.cn
spam05.cicc.com.cn
hksfatca.cicc.com.cn
wecom.cicc.com.cn
cloud.cicc.com.cn
ras.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cbeb.cicc.com.cn
ecrmapp.cicc.com.cn
km.cicc.com.cn
mx12.cicc.com.cn
cloud.cicc.com.cn
rms.cicc.com.cn
hcpanywhere.cicc.com.cn
cloud.cicc.com.cn
mx07.cicc.com.cn
sf.cicc.com.cn
ecounter.cicc.com.cn
jwkh.cicc.com.cn
hkm10.cicc.com.cn
sftest.cicc.com.cn
sip.cicc.com.cn
hkmdm.cicc.com.cn
cicc.com.cn
spam04.cicc.com.cn
cloud.cicc.com.cn
visitor.cicc.com.cn
jwkh.cicc.com.cn
jwkh.cicc.com.cn
spam01.cicc.com.cn
lbmam.cicc.com.cn
mx10.cicc.com.cn
mdm.cicc.com.cn
www.cicc.com.cn
cloudapp.cicc.com.cn
wrs.cicc.com.cn
hkfufatca.cicc.com.cn
mx08.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
jw.cicc.com.cn
ecounter.cicc.com.cn
mx12.cicc.com.cn
www.corporate-actions.cicc.com.cn
hkmdm.cicc.com.cn
spam02.cicc.com.cn
ras.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
cloud.cicc.com.cn
cloud.cicc.com.cn
cbeb.cicc.com.cn
ecounter.cicc.com.cn
cloud.cicc.com.cn
ecrmapp.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sts.cicc.com.cn
spam03.cicc.com.cn
ras.cicc.com.cn
ec.cicc.com.cn
sf.cicc.com.cn
tuoguan.cicc.com.cn
ecrmapp.cicc.com.cn
tuoguan.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
mx08.cicc.com.cn
ecounter.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
remotepc.cicc.com.cn
hkm10.cicc.com.cn
Certificate
The complete raw certificate details for hkmdm.cicc.com.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIQBFI6rhGvNHoFIMgMA+FzzjANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzAxMzEwMDAwMDBa Fw0yNDAzMDIyMzU5NTlaMHUxCzAJBgNVBAYTAkhLMRAwDgYDVQQHEwdDZW50cmFs MTgwNgYDVQQKEy9DaGluYSBJbnRlcm5hdGlvbmFsIENhcGl0YWwgQ29ycG9yYXRp b24gTGltaXRlZDEaMBgGA1UEAxMRaGttZG0uY2ljYy5jb20uY24wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Rzi+mtWZK5r4gQ0QK6ooMcbYLyjKjLI6 eIZy7pfyUn/6TQk3VpurjlAj9JW3/FiyvHO5Bb3VDr8847p4vYmUzheJuKfxUGlb uQgDEsghvlAk6AdWj+fQFaz/M+r/RgAWKtr4LfuAPfQdqtXjM8U97D7YNfQxg+MZ OKPNCeqgyLRu8hwu59NQNqhbPyz1fd/DtVNBAc56EiQkv/u5sLX6G7jvw3hhHDxb 04fJFEwpDBGparihnbRQtGkikf99F3JAvqDoZkbfEsvl4MnaZ6gLJdI4cwb8q8UP Vs5Jq9ZYC0AnwgXJ+k8mF6nsAZm4bQMQ5+t6DHYADRiKGwOcVL15AgMBAAGjggOs MIIDqDAfBgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQU NH2Re8VNnViSzNh8VzAvLEnUn3UwVgYDVR0RBE8wTYIRaGttZG0uY2ljYy5jb20u Y26CEWhrbWFtLmNpY2MuY29tLmNughFoa3Jhcy5jaWNjLmNvbS5jboISaGtyYXMy LmNpY2MuY29tLmNuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGln aWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDBAoD6g PIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2 MjAyMENBMS00LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIB FhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfwYIKwYBBQUHAQEEczBxMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKG PWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1 NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIB awFpAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGGBn855AAA BAMARzBFAiA/A6LmVwS7+bXUwa8NihYPiKoMNayJ+MbcTnidHBdr0AIhALcs+ZaX owdhUU+Cin09LnsOeMVAEgz1Lx9R2/LmvhqRAHcAc9meiRtMlnigIH1HneayxhzQ UV5xGSqMa4AQesF3crUAAAGGBn86EwAABAMASDBGAiEA8ZH5qi5+/xa6Qmlgxn1n ch0qhTdu0zhrq3arRpS4jvQCIQD/fGSJLYl7XpCD5H63lRmVTpjlKJzGDAixEtfw FDI7oAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABhgZ/OeEA AAQDAEcwRQIgRX4XSkNpphLDOHgW1eSaRfa7f7jr9ICaUubO4Zdyh3cCIQDs+m4O DpndupgDSXgcckzB4pllKZG31+fGiYh3KF4SVDANBgkqhkiG9w0BAQsFAAOCAQEA CClhVYgIq2HLqiBi83NA02UfSgYlWaNfmauxBAX2JWL3Ba1dJJ1yOT7Zg9PQ6hA/ 5NziI+uFx5lRyXSSLh77vNWu80n/9sPehOpQlseXDBnHDZ1nRD2Op+O1BC7XNlHi NZQ8sivzZYboV72resD/w1xTeKs6Jb6kMI2q4cvJNO0UshfmlnPJTdTMO+SwGDh/ mj3Rar0UJ5i0USK9nlkBAgep9Yw1IhO7sxYcXlavNMIgo9DPKmE8ZQVLJgwR/X25 WRBg4rVYTFDXGIEFSru/k8EBGtGQR8rLdDWk1PpbM+DbLx0cZ7LVsRiv++nEKzng /FRMQrzlZ7zRNrGLDXIfRw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0c4vprVmSua+IENECuq KDHG2C8oyoyyOniGcu6X8lJ/+k0JN1abq45QI/SVt/xYsrxzuQW91Q6/POO6eL2J lM4Xibin8VBpW7kIAxLIIb5QJOgHVo/n0BWs/zPq/0YAFira+C37gD30HarV4zPF Pew+2DX0MYPjGTijzQnqoMi0bvIcLufTUDaoWz8s9X3fw7VTQQHOehIkJL/7ubC1 +hu478N4YRw8W9OHyRRMKQwRqWq4oZ20ULRpIpH/fRdyQL6g6GZG3xLL5eDJ2meo CyXSOHMG/KvFD1bOSavWWAtAJ8IFyfpPJhep7AGZuG0DEOfregx2AA0YihsDnFS9 eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5743870496469863635358886768725291982 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Central' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China International Capital Corporation Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hkmdm.cicc.com.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24146636957240369910209971753219480070960212123269715248323378308200615595716426484847743618290976879858625132153486217988192781199999416806272473056751531543677206486580813794020959980896345445391856680348127339584906926216240465316485374187911254795964443933339122502935108244346187996503713974522208528320681488780494299733193432433658190042004248600613290544675350377645158279837268198046949845074976692014301472827248377294654521758117342294912397840052393310456725266338773042080406279339750812636935031733372224610415461426167950006156769206882557820998772527505133758348084891938863113320798783070080553237881 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 347d917bc54d9d5892ccd87c57302f2c49d49f75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkmdm.cicc.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkmam.cicc.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkras.cicc.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkras2.cicc.com.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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