*.unityads.unity.cn

- 优三缔科技（上海）有限公司 -

Issued by GeoTrust RSA CN CA G2

About this certificate

This digital certificate with serial number 0d:be:e6:82:e7:59:09:bf:94:9b:92:e3:ec:24:cc:20 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

优三缔科技（上海）有限公司

Organization: 优三缔科技（上海）有限公司
State / Province: 上海市
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:be:e6:82:e7:59:09:bf:94:9b:92:e3:ec:24:cc:20
Serial Number (int): 18271175673794168037742871938630732832
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ca:13:61:45:f5:eb:cf:ab:d9:8c:46:ac:73:2a:cb:51:3c:42:bd:e5
AuthorityKeyId: 24:6f:91:3f:89:87:87:0e:32:c2:40:18:df:c5:4c:eb:4f:c8:49:32

Fingerprint (sha1): 29:62:fd:34:8a:d6:9c:2f:04:d9:d1:b5:98:39:59:6c:ce:cd:8a:4b
Fingerprint (sha256): af:2f:a5:b0:e8:ed:0f:ae:30:dd:ee:cd:6e:22:29:a6:1f:c4:90:03:88:d3:ce:da:cf:bd:58:a6:a7:46:b6:2d

Issuing Certificate URL: http://cacerts.digicert.cn/GeoTrustRSACNCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/GeoTrustRSACNCAG2.crl

Check the revocation status for certificate *.unityads.unity.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.unityads.unity.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.unityads.unity.cn
unityads.unity.cn

Other certificates including the domain name unity.cn

(limited to 100 certificates)
hd.welldo.online
*.internal.unity.cn
*.vivox.unity.cn
*.cloud.unity.cn
*.internal.unity.cn
*.cloud.unity.cn
*.scaling.unity.cn
*.packages.unity.cn
*.dev.multiplay.unity.cn
zohoonedemo.zoholics.cn
support.scaling.unity.cn
*.userauth.unity.cn
*.cloud.unity.cn
*.unity.cn
*.internal.unity.cn
*.unity.cn
*.unity.cn
*.unity.cn
vip.taoyiming.top
*.unity.cn
*.cloud.unity.cn
*.unity.cn
*.stg.mz.internal.unity.cn
cdn.unity.cn
support.menred.com
*.multiplay.unity.cn
*.unity.cn
vip.taoyiming.top
*.unity.cn
*.prd.mz.internal.unity.cn
*.unity.cn
*.unity.cn
*.cloud.unity.cn
cdn.unity.cn
*.unityads.unity.cn
*.unity.cn
*.cloud.unity.cn
*.unity.cn
*.internal.unity.cn
*.unity.cn
zohoonedemo.zoholics.cn
*.prd.mz.internal.unity.cn
*.stg.mz.internal.unity.cn
*.cdn.unity.cn
*.multiplay.unity.cn
*.unityads.unity.cn
*.unity.cn
*.internal.unity.cn
*.vivox.unity.cn
*.internal.unity.cn
*.unity.cn
*.unity.cn
*.scaling.unity.cn
support.scaling.unity.cn
*.unityads.unity.cn
*.unityads.unity.cn
*.unity.cn
*.vivox.unity.cn
presalesdemo.zoholics.cn
*.unityads.unity.cn
*.unity.cn
*.unity.cn
*.prd.mz.internal.unity.cn
*.unityads.unity.cn
presalesdemo.zoholics.cn
*.unity.cn
*.multiplay.unity.cn
*.internal.unity.cn
*.unity.cn

Certificate

The complete raw certificate details for *.unityads.unity.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZjCCBU6gAwIBAgIQDb7mgudZCb+Um5Lj7CTMIDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVH
ZW9UcnVzdCBSU0EgQ04gQ0EgRzIwHhcNMjIxMTIyMDAwMDAwWhcNMjMxMTIyMjM1
OTU5WjBxMQswCQYDVQQGEwJDTjESMBAGA1UECAwJ5LiK5rW35biCMTAwLgYDVQQK
DCfkvJjkuInnvJTnp5HmioDvvIjkuIrmtbfvvInmnInpmZDlhazlj7gxHDAaBgNV
BAMMEyoudW5pdHlhZHMudW5pdHkuY24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQClK98xKgkqOBIBgYQ3C/8MmXUQtLZO7PFu1/LftnPZFhcaM/jQZswk
y4K+wEAOhrLA7yMaqScfRYooc8mLYY+ExM5Pd6p5G7KCVYHIdKoahSndPENvLcgY
hbxSPOJTf29tuDmkQUG4K+A62au3dizQGwOYNuwwACOGyYVuSfdgpDfFxE06r90S
fFHhRkAWQ87UdF15P4z8d5Hx+JHj/oOaAwa6Aby5rU22m68ikyFw9Wpj1lhqIXnB
R97uP7r0H/wnDDmwG3y3bH615I9bsKjrQHohwI9eSl+nUTHZP53rKP2ZUJyIMzZY
tUuBJNhyN6nN1UKLXj9jTjI9k46WjMClAgMBAAGjggMlMIIDITAfBgNVHSMEGDAW
gBQkb5E/iYeHDjLCQBjfxUzrT8hJMjAdBgNVHQ4EFgQUyhNhRfXrz6vZjEascyrL
UTxCveUwMQYDVR0RBCowKIITKi51bml0eWFkcy51bml0eS5jboIRdW5pdHlhZHMu
dW5pdHkuY24wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLmRpZ2ljZXJ0LmNu
L0dlb1RydXN0UlNBQ05DQUcyLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcG
CCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwcQYIKwYBBQUH
AQEEZTBjMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5kaWdpY2VydC5jbjA8Bggr
BgEFBQcwAoYwaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY24vR2VvVHJ1c3RSU0FD
TkNBRzIuY3J0MAkGA1UdEwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2
AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhJ4LSbUAAAQDAEcw
RQIgQoJ2qdfVZ3uE7M42ptx7tRrQOk2mbgO8U2GNIJMwW2gCIQCFgQubnn0zQuQZ
lpwkcqT0ju8wkikrcUhFrC5ZN6QyHQB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwL
h9zwAw55NqWaAAABhJ4LSdMAAAQDAEcwRQIhAJ44bR7NBcURDsBjFBGlLKxNRqR4
z750KnS1sU7NNLFiAiBKc4L5DUp2FNOpL5LQI8YaFCP9mQgM9iUmj5j2skw6xgB2
ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhJ4LSaEAAAQDAEcw
RQIgEMegspKYKmd4dxM+KFmlUdtjnoWMGbPlmHKVbuY7LvACIQCVACumF7tPgX79
LYSQnRcMimapnex2hSZb3X7NWeVshDANBgkqhkiG9w0BAQsFAAOCAQEAMlxuKWvQ
V4GDWqqel0jicoSVCGCpDGS5OCq+SGux3k0DbRUNCRGBEXpR6kOjtNP1LSoXlnWb
eKh0W2IFuL7gxxyE5hon6edv9txlrJcLmTWyFchFhmGCFcljGrH9zeSc0oJZC5xd
SymPAQWmrImBHms+G6vbEN/WiXIclemBl1KB7HLRme+0GYCY0pB+XZIopOfNH2bC
AAC8TToBUYexrLoXwqmP+5Sp6+7OR0glywEXwtfVtnhrdooEyRvP76iB4bib8o+B
/dKaDxB0WD1bvVTRwN4R/I4O81eufj3VpwI3WR6YNR2K+o+1xgtQbVnkxRBTBhCz
iBctV+PQWhnKZg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSvfMSoJKjgSAYGENwv/
DJl1ELS2Tuzxbtfy37Zz2RYXGjP40GbMJMuCvsBADoaywO8jGqknH0WKKHPJi2GP
hMTOT3eqeRuyglWByHSqGoUp3TxDby3IGIW8UjziU39vbbg5pEFBuCvgOtmrt3Ys
0BsDmDbsMAAjhsmFbkn3YKQ3xcRNOq/dEnxR4UZAFkPO1HRdeT+M/HeR8fiR4/6D
mgMGugG8ua1NtpuvIpMhcPVqY9ZYaiF5wUfe7j+69B/8Jww5sBt8t2x+teSPW7Co
60B6IcCPXkpfp1Ex2T+d6yj9mVCciDM2WLVLgSTYcjepzdVCi14/Y04yPZOOlozA
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18271175673794168037742871938630732832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CN CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '优三缔科技（上海）有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.unityads.unity.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20850954331955299485897180855305933882930349404197505908827389495069107320755518260849236931020444747865788194757588724877618298205280517718403904176198117469368419243087907413813483210438189502427109653909907002608032704658189412340232539921710726911922519303379604714791171525472405912931615889780606581564035135229358499472935868596792742031485452236089201461925919502493935795681374963320928357466621336534656237369593247335513237728364255302206249472218294967598726039957388244759035853883938353556730514483736354897154824517311667194654991970523394313439593847288405315668096147354527978275975946006510554628261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246f913f8987870e32c24018dfc54ceb4fc84932
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca136145f5ebcfabd98c46ac732acb513c42bde5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unityads.unity.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unityads.unity.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/GeoTrustRSACNCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/GeoTrustRSACNCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001849e0b49b500000403004730450220428276a9d7d5677b84ecce36a6dc7bb51ad03a4da66e03bc53618d2093305b6802210085810b9b9e7d3342e419969c2472a4f48eef3092292b714845ac2e5937a4321d007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001849e0b49d300000403004730450221009e386d1ecd05c5110ec0631411a52cac4d46a478cfbe742a74b5b14ecd34b16202204a7382f90d4a7614d3a92f92d023c61a1423fd99080cf625268f98f6b24c3ac6007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001849e0b49a10000040300473045022010c7a0b292982a677877133e2859a551db639e858c19b3e59872956ee63b2ef002210095002ba617bb4f817efd2d84909d170c8a66a99dec7685265bdd7ecd59e56c84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00325c6e296bd05781835aaa9e9748e27284950860a90c64b9382abe486bb1de4d036d150d091181117a51ea43a3b4d3f52d2a1796759b78a8745b6205b8bee0c71c84e61a27e9e76ff6dc65ac970b9935b215c84586618215c9631ab1fdcde49cd282590b9c5d4b298f0105a6ac89811e6b3e1babdb10dfd689721c95e981975281ec72d199efb4198098d2907e5d9228a4e7cd1f66c20000bc4d3a015187b1acba17c2a98ffb94a9ebeece474825cb0117c2d7d5b6786b768a04c91bcfefa881e1b89bf28f81fdd29a0f1074583d5bbd54d1c0de11fc8e0ef357ae7e3dd5a70237591e98351d8afa8fb5c60b506d59e4c510530610b388172d57e3d05a19ca66