ems.kiaintra.com

- Hyundai Motor Company -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ab:6d:6a:42:4c:f1:32:17:2e:35:fd:2f:71:b0:2c:5c was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hyundai Motor Company

Organization: Hyundai Motor Company
Organization unit: HMG Business Team
Organization unit: Hosted by Korea Information Certificate Authority, Inc.
Organization unit: InstantSSL
Address: 12, Heolleung-ro
Postal code: 06797
State / Province: Seoul
Locality: Seocho-gu
Country: KR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ab:6d:6a:42:4c:f1:32:17:2e:35:fd:2f:71:b0:2c:5c
Serial Number (int): 227866102825090071911450504901851884636
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: da:45:73:f0:1e:f6:38:02:ea:9b:a0:83:67:33:c9:ef:14:d4:33:ba
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): f7:9b:1b:87:93:97:d5:8a:5c:c0:6b:e7:92:b4:21:13:14:4b:13:86
Fingerprint (sha256): d6:e9:71:09:75:f1:b7:82:1f:1c:c7:6d:0f:2d:8b:d9:bd:f8:45:77:23:d1:fb:1a:63:03:3d:04:22:ec:e4:76

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ems.kiaintra.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ems.kiaintra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ems.kiaintra.com
www.ems.kiaintra.com

Other certificates including the domain name kiaintra.com

(limited to 100 certificates)
msos.kia.com
stg-web.icps.kiaintra.com
ksw.kia.co.kr
ems.kiaintra.com
kpi.kiaintra.com
www.hyundai.com
ktong-gw.kiaintra.com
h1asmt.kiaintra.com
tstmgsw.kiaintra.com
khcbopq.kiaintra.com
ems.kiaintra.com
dmis.kiaintra.com
ems.kiaintra.com
stg-web.icps.kiaintra.com
k-cube.kiaintra.com
kmmmes.kiaintra.com
k-cubedev.kiaintra.com
vocas.kiaintra.com
ems.kiaintra.com
msos.kia.com
ems.kiaintra.com
otms.kiaintra.com
otms.kiaintra.com
kas.kiaintra.com
ksw.kia.co.kr
k-cubespdev.kiaintra.com
ktong-mm.kiaintra.com
dmobileautoq.kiaintra.com
kmmmes.kiaintra.com
dmis.kiaintra.com
h1asmt.kiaintra.com
ksw.kia.co.kr
ems.kiaintra.com
ksw.kia.co.kr
www.hyundai.com
otms.kiaintra.com
ktong-push.kiaintra.com
dmis.kiaintra.com
hknpms.hmc.co.kr
ktong-wm.kiaintra.com
ksw.kia.co.kr
dmis.kiaintra.com
msos.kia.com
ktong-gw.kiaintra.com
ems.kiaintra.com
apiportal.kiaintra.com
sohamesweb.kiaintra.com
ems.kiaintra.com
dmobileautoq.kiaintra.com
vocas.kiaintra.com
ktong-push.kiaintra.com
k-cubeoodev.kiaintra.com
dmis.kiaintra.com
khcbopq.kiaintra.com
k-cubesp.kiaintra.com
k-cubeoo.kiaintra.com
em.hmc.co.kr
apiportal.kiaintra.com
sohamesweb.kiaintra.com
ktong-gw.kiaintra.com
ktong-gw.kiaintra.com
otms.kiaintra.com
k-cubeoo.kiaintra.com
k-cubeoodev.kiaintra.com
k-cube.kiaintra.com
pis.hmc.co.kr
gpms-dev.kiaintra.com
gpms-dev.kiaintra.com
tstmgswmob.kiaintra.com
msos.kia.com
ksw.kia.co.kr
ksw.kia.co.kr
www.hyundai.com
ems.kiaintra.com
ems.kiaintra.com
h1asmt.kiaintra.com
k-cubespdev.kiaintra.com
khcbopq.kiaintra.com
tstmgswmob.kiaintra.com
ems.kiaintra.com
pis.hmc.co.kr
ksw.kia.co.kr
ktong-gw.kiaintra.com
pas.kia.com
devktong-gw.kiaintra.com
k-cubedev.kiaintra.com
ems.kiaintra.com
devktong-gw.kiaintra.com
ems.kiaintra.com
ems.kiaintra.com
h1asmt.kiaintra.com
sohamesweb.kiaintra.com
ktong-mm.kiaintra.com
tstmgsw.kiaintra.com
gpms-dev.kiaintra.com
khcbopq.kiaintra.com
sohamesweb.kiaintra.com
ktong-gw.kiaintra.com
ksw.kia.co.kr
k-cubesp.kiaintra.com

Certificate

The complete raw certificate details for ems.kiaintra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHITCCBgmgAwIBAgIRAKttakJM8TIXLjX9L3GwLFwwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0xOTA3MjMwMDAwMDBaFw0yMDA4MTAyMzU5NTlaMIIBCjELMAkG
A1UEBhMCS1IxDjAMBgNVBBETBTA2Nzk3MQ4wDAYDVQQIEwVTZW91bDESMBAGA1UE
BxMJU2VvY2hvLWd1MRkwFwYDVQQJExAxMiwgSGVvbGxldW5nLXJvMR4wHAYDVQQK
ExVIeXVuZGFpIE1vdG9yIENvbXBhbnkxGjAYBgNVBAsTEUhNRyBCdXNpbmVzcyBU
ZWFtMUAwPgYDVQQLEzdIb3N0ZWQgYnkgS29yZWEgSW5mb3JtYXRpb24gQ2VydGlm
aWNhdGUgQXV0aG9yaXR5LCBJbmMuMRMwEQYDVQQLEwpJbnN0YW50U1NMMRkwFwYD
VQQDExBlbXMua2lhaW50cmEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAijBIhuh1KlXzUetWNDsB0m/PcwF0H59pIcE6W/AH3fOanwyGlocN9rVH
6+1ImDf1w2PDA4zIwpwQSsqGWoUR3wznQ++AsgCeXor3plVkMcjFHKz0y7tI6EZU
7kBUlpsnQNL2ttTP2JV0F00w7LMW4wT8pgHJCYNKHeN/rFMezCFhV/s5RTC7mvM0
bhYv3WjXyjw/gwUNPXWQCKJQKIDLHI28BOiO5DoVje3vrmOixv/kof8UspP+/Vk/
0B8a04BbmPvbG2Lia4a696AB0v+KlaR6E2BJOwTANCYGWECj5asiXKZ9FC+5e3dc
6+mZIoELswzLJjc2BHrlmEULywOXMwIDAQABo4IC8jCCAu4wHwYDVR0jBBgwFoAU
F9nWJSdn+THCSUPZMDZEjGypT+swHQYDVR0OBBYEFNpFc/Ae9jgC6pugg2czye8U
1DO6MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjBKBgNVHSAEQzBBMDUGDCsGAQQBsjEBAgEDBDAlMCMG
CCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwWgYD
VR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNB
T3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBigYIKwYB
BQUHAQEEfjB8MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LnNlY3RpZ28uY29tL1Nl
Y3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0
MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAxBgNVHREEKjAo
ghBlbXMua2lhaW50cmEuY29tghR3d3cuZW1zLmtpYWludHJhLmNvbTCCAQUGCisG
AQQB1nkCBAIEgfYEgfMA8QB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3v
i5BeAAABbB2HuAQAAAQDAEcwRQIhAKuU56u/zR+7CfYGqSdPo3vQCm2f4wBv7Q7H
ldmG9JoHAiBa9EG7ju6L2c3D8LgyQM8xn26jRxML2AHDP+QuJnGtbAB3AF6nc/nf
VsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbB2HuBkAAAQDAEgwRgIhAPZU
R4+V459Zj0PMO3NBnMw1ruvawOiLNv5X0ELuGL8wAiEA2KE5JQ47YHj0ELHgEtZr
tkvv8OfwOA0klKyswkLRc3wwDQYJKoZIhvcNAQELBQADggEBAD0C5YDwajIYpKRV
9NOs/ekmQW2AsMFhDw/25CuHPTf4EvU0upjhKDgpH8m1/1Mz8+l3jlo0++dNixku
ugeKKsbdR1ghpQpwmyHrNtd7FlIEfcyNQ5o17ZFzSePn7zfCk52IkV8iB6m/7mtF
onlaaX0Mir54N1Bxh/uBQTYlX0PZ6gFzv0N53Rez5lAmQsxdWROCx9TyvlczBhEQ
E4kS3YAU+qzsifoOkB+Y4GIbT6r5dxdUGMpC+7i/VFi5lfv6jgNMOwsQ9/PMSzyv
fFyGE8EFvEmUB5FBHAqUvOQNx9+yeejr1v6zY8EneGwn2ngGynPEJL1CL/jdSXXN
9kwSpSo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijBIhuh1KlXzUetWNDsB
0m/PcwF0H59pIcE6W/AH3fOanwyGlocN9rVH6+1ImDf1w2PDA4zIwpwQSsqGWoUR
3wznQ++AsgCeXor3plVkMcjFHKz0y7tI6EZU7kBUlpsnQNL2ttTP2JV0F00w7LMW
4wT8pgHJCYNKHeN/rFMezCFhV/s5RTC7mvM0bhYv3WjXyjw/gwUNPXWQCKJQKIDL
HI28BOiO5DoVje3vrmOixv/kof8UspP+/Vk/0B8a04BbmPvbG2Lia4a696AB0v+K
laR6E2BJOwTANCYGWECj5asiXKZ9FC+5e3dc6+mZIoELswzLJjc2BHrlmEULywOX
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 227866102825090071911450504901851884636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06797'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seoul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seocho-gu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12, Heolleung-ro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyundai Motor Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HMG Business Team'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Korea Information Certificate Authority, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InstantSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ems.kiaintra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17444695472141855389635790001234164341463836407519944456856538578683725764162289260341904604839390670957377055358783835550064153774436560884077673029192993635063115802735769862004316937757130331410544519370356392700650296504215860979810080842468951673785986288870538321058791050477296366064206647061127451012169298463206526736757841521070072553995590703052314723054966347773739849193422873020033986918773733794996552832757293769580868080734514880793471345601167183102736895350518318737734992249619729720319345077759534667106197748021053740955229509221018279400317839206072174937324068465756960453839210147733827721011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da4573f01ef63802ea9ba0836733c9ef14d433ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.kiaintra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ems.kiaintra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016c1d87b8040000040300473045022100ab94e7abbfcd1fbb09f606a9274fa37bd00a6d9fe3006fed0ec795d986f49a0702205af441bb8eee8bd9cdc3f0b83240cf319f6ea347130bd801c33fe42e2671ad6c0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016c1d87b8190000040300483046022100f654478f95e39f598f43cc3b73419ccc35aeebdac0e88b36fe57d042ee18bf30022100d8a139250e3b6078f410b1e012d66bb64beff0e7f0380d2494acacc242d1737c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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