ckh.com.hk

- CK Hutchison Holdings Limited -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:3c:16:a0:e8:b4:20:11:1c:cc:59:29:1e:4a:6d:cd was issued on by DigiCert Inc.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

CK Hutchison Holdings Limited

Organization: CK Hutchison Holdings Limited
Locality: Hong Kong Island
Country: HK

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:3c:16:a0:e8:b4:20:11:1c:cc:59:29:1e:4a:6d:cd
Serial Number (int): 6958136751972231998754128726468488653
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2e:6e:af:ec:19:4c:1c:c0:f4:e5:e9:89:81:e9:f9:73:b2:d6:93:32
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 64:27:ad:99:2b:9b:84:f6:f7:a4:ed:13:df:f5:0c:8e:82:e4:f5:90
Fingerprint (sha256): ad:21:da:4c:9a:dd:84:65:2d:5d:46:2c:6a:fb:e1:cc:7f:f4:73:cc:65:ce:06:70:66:e7:73:9c:0d:72:49:31

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ckh.com.hk

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ckh.com.hk

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ckh.com.hk
acmgap02.ckh.com.hk
analystmeeting.ckh.com.hk
apps01.ckh.com.hk
apps02.ckh.com.hk
apps03.ckh.com.hk
cas-form.ckh.com.hk
ckhcsportal.ckh.com.hk
cp1.ckh.com.hk
csportal.ckh.com.hk
dcars.ckh.com.hk
dcbcr.ckh.com.hk
dgears.ckh.com.hk
ebiscard.ckh.com.hk
employee.ckh.com.hk
hwldisclaimer.ckh.com.hk
info.ckh.com.hk
ip.ckh.com.hk
is.ckh.com.hk
m1.ckh.com.hk
my.ckh.com.hk
ool.ckh.com.hk
pcars.ckh.com.hk
pcbcr.ckh.com.hk
pgears.ckh.com.hk
pmdr.ckh.com.hk
sphere.ckh.com.hk
ssp.ckh.com.hk
sspuat.ckh.com.hk
ucars.ckh.com.hk
ucbcr.ckh.com.hk
ugears.ckh.com.hk
umdr.ckh.com.hk
webcast.ckh.com.hk
www.ckh.com.hk
www.sphere.ckh.com.hk
xsohecom.ckh.com.hk
xsohil.ckh.com.hk

Other certificates including the domain name ckh.com.hk

(limited to 100 certificates)
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mail2.ckh.com.hk
m1.ckh.com.hk
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
emf2.ckh.com.hk
mail2.ckh.com.hk
pqmx.ckh.com.hk
sni.cloudflaressl.com
mail1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
logon2.ckh.com.hk
mail2.ckh.com.hk
sni.cloudflaressl.com
guest.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
mailgw.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
m1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
mail2.ckh.com.hk
www.ckh.com.hk
ckh.com.hk
sni.cloudflaressl.com
logon.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
emf2.ckh.com.hk
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
mail.hwl.com
guest.ckh.com.hk
vpn1.ckh.com.hk
guest.ckh.com.hk
*.spapps02.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
mail1.ckh.com.hk
vpn3.ckh.com.hk
mail1.ckh.com.hk
mail.hwl.com
sni.cloudflaressl.com
mdm1.ckh.com.hk
sni.cloudflaressl.com
mailgw.ckh.com.hk
logon.ckh.com.hk
pqmx.ckh.com.hk
ckh.com.hk
mailgw.ckh.com.hk
mail1.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk

Certificate

The complete raw certificate details for ckh.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEexZWAsYrdAa032yWRG3DHLQZb5U4
T6pfea7ccboLWjCm9OsxaTNqtM5pge/zAgUtDc5Lh+39r1cCbikn3KHB1w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6958136751972231998754128726468488653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong Island'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CK Hutchison Holdings Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ckh.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047b165602c62b7406b4df6c96446dc31cb4196f95384faa5f79aedc71ba0b5a30a6f4eb3169336ab4ce6981eff302052d0dce4b87edfdaf57026e2927dca1c1d7
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e6eafec194c1cc0f4e5e98981e9f973b2d69332
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (716 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acmgap02.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analystmeeting.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps01.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps02.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps03.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-form.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckhcsportal.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp1.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csportal.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcars.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcbcr.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgears.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiscard.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employee.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwldisclaimer.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm1.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ool.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcars.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbcr.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgears.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmdr.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphere.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sspuat.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucars.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucbcr.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugears.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umdr.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcast.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sphere.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsohecom.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsohil.ckh.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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