ec.cicc.com.cn
- China International Capital Corporation Limited -
Issued by Secure Site Pro CA G2
About this certificate
This digital certificate with serial number 0d:3b:40:29:e7:b2:06:ef:21:63:39:fe:36:a3:6c:0d was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
China International Capital Corporation Limited
Organization:
China International Capital Corporation Limited
State / Province:
北京市
Country: CN
Country: CN
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:3b:40:29:e7:b2:06:ef:21:63:39:fe:36:a3:6c:0dSerial Number (int): 17587610854133016779576441119376108557
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: de:75:a0:b9:86:f5:3e:c9:70:93:e2:0e:b6:8e:a8:32:23:7a:86:56
AuthorityKeyId: 45:41:e3:93:54:70:b8:e9:a5:b7:96:bc:26:b1:58:75:42:97:3e:f3
Fingerprint (sha1): 55:b5:28:2e:bf:89:df:2d:76:cd:51:11:52:78:92:6f:5a:8e:dd:3e
Fingerprint (sha256): e1:66:79:e4:1e:a0:f3:38:22:65:c6:62:17:df:14:a1:b3:0b:3d:b2:51:1e:a3:13:5f:5d:75:ed:a3:7e:cc:3e
Issuing Certificate URL: http://crl.digicert-cn.com/SecureSiteProCAG2.crt
Revocation information
OCSP Server: http://ocsp.dcocsp.cnCRL Distribution Point: http://crl3.digicert.com/SecureSiteProCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/SecureSiteProCAG2.crl
Check the revocation status for certificate ec.cicc.com.cn
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ec.cicc.com.cn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ec.cicc.com.cn
Other certificates including the domain name cicc.com.cn
(limited to 100 certificates)
aitest.cicc.com.cn
hkmdm.cicc.com.cn
remotepchw.cicc.com.cn
ecc.cicc.com.cn
cicc.com.cn
jwkh.cicc.com.cn
mx09.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sf.cicc.com.cn
uras.cicc.com.cn
hksfatca.cicc.com.cn
ibanker.dev.cicc.com.cn
mx11.cicc.com.cn
vdi.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
mx10.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cloud.cicc.com.cn
osms.cicc.com.cn
ecrmapp.cicc.com.cn
ecounter.cicc.com.cn
spam05.cicc.com.cn
hksfatca.cicc.com.cn
wecom.cicc.com.cn
cloud.cicc.com.cn
ras.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cbeb.cicc.com.cn
ecrmapp.cicc.com.cn
km.cicc.com.cn
mx12.cicc.com.cn
cloud.cicc.com.cn
rms.cicc.com.cn
hcpanywhere.cicc.com.cn
cloud.cicc.com.cn
mx07.cicc.com.cn
sf.cicc.com.cn
ecounter.cicc.com.cn
jwkh.cicc.com.cn
hkm10.cicc.com.cn
sftest.cicc.com.cn
sip.cicc.com.cn
hkmdm.cicc.com.cn
cicc.com.cn
spam04.cicc.com.cn
cloud.cicc.com.cn
visitor.cicc.com.cn
jwkh.cicc.com.cn
jwkh.cicc.com.cn
spam01.cicc.com.cn
lbmam.cicc.com.cn
mx10.cicc.com.cn
mdm.cicc.com.cn
www.cicc.com.cn
cloudapp.cicc.com.cn
wrs.cicc.com.cn
hkfufatca.cicc.com.cn
mx08.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
jw.cicc.com.cn
ecounter.cicc.com.cn
mx12.cicc.com.cn
www.corporate-actions.cicc.com.cn
hkmdm.cicc.com.cn
spam02.cicc.com.cn
ras.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
cloud.cicc.com.cn
cloud.cicc.com.cn
cbeb.cicc.com.cn
ecounter.cicc.com.cn
cloud.cicc.com.cn
ecrmapp.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sts.cicc.com.cn
spam03.cicc.com.cn
ras.cicc.com.cn
ec.cicc.com.cn
sf.cicc.com.cn
tuoguan.cicc.com.cn
ecrmapp.cicc.com.cn
tuoguan.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
mx08.cicc.com.cn
ecounter.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
remotepc.cicc.com.cn
hkm10.cicc.com.cn
hkmdm.cicc.com.cn
remotepchw.cicc.com.cn
ecc.cicc.com.cn
cicc.com.cn
jwkh.cicc.com.cn
mx09.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sf.cicc.com.cn
uras.cicc.com.cn
hksfatca.cicc.com.cn
ibanker.dev.cicc.com.cn
mx11.cicc.com.cn
vdi.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
mx10.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cloud.cicc.com.cn
osms.cicc.com.cn
ecrmapp.cicc.com.cn
ecounter.cicc.com.cn
spam05.cicc.com.cn
hksfatca.cicc.com.cn
wecom.cicc.com.cn
cloud.cicc.com.cn
ras.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cbeb.cicc.com.cn
ecrmapp.cicc.com.cn
km.cicc.com.cn
mx12.cicc.com.cn
cloud.cicc.com.cn
rms.cicc.com.cn
hcpanywhere.cicc.com.cn
cloud.cicc.com.cn
mx07.cicc.com.cn
sf.cicc.com.cn
ecounter.cicc.com.cn
jwkh.cicc.com.cn
hkm10.cicc.com.cn
sftest.cicc.com.cn
sip.cicc.com.cn
hkmdm.cicc.com.cn
cicc.com.cn
spam04.cicc.com.cn
cloud.cicc.com.cn
visitor.cicc.com.cn
jwkh.cicc.com.cn
jwkh.cicc.com.cn
spam01.cicc.com.cn
lbmam.cicc.com.cn
mx10.cicc.com.cn
mdm.cicc.com.cn
www.cicc.com.cn
cloudapp.cicc.com.cn
wrs.cicc.com.cn
hkfufatca.cicc.com.cn
mx08.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
jw.cicc.com.cn
ecounter.cicc.com.cn
mx12.cicc.com.cn
www.corporate-actions.cicc.com.cn
hkmdm.cicc.com.cn
spam02.cicc.com.cn
ras.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
cloud.cicc.com.cn
cloud.cicc.com.cn
cbeb.cicc.com.cn
ecounter.cicc.com.cn
cloud.cicc.com.cn
ecrmapp.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sts.cicc.com.cn
spam03.cicc.com.cn
ras.cicc.com.cn
ec.cicc.com.cn
sf.cicc.com.cn
tuoguan.cicc.com.cn
ecrmapp.cicc.com.cn
tuoguan.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
mx08.cicc.com.cn
ecounter.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
remotepc.cicc.com.cn
hkm10.cicc.com.cn
Certificate
The complete raw certificate details for ec.cicc.com.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGozCCBYugAwIBAgIQDTtAKeeyBu8hYzn+NqNsDTANBgkqhkiG9w0BAQsFADBf MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR4wHAYDVQQDExVTZWN1cmUgU2l0ZSBQcm8gQ0EgRzIw HhcNMjMxMTIwMDAwMDAwWhcNMjQxMjIwMjM1OTU5WjB0MQswCQYDVQQGEwJDTjES MBAGA1UECAwJ5YyX5Lqs5biCMTgwNgYDVQQKEy9DaGluYSBJbnRlcm5hdGlvbmFs IENhcGl0YWwgQ29ycG9yYXRpb24gTGltaXRlZDEXMBUGA1UEAxMOZWMuY2ljYy5j b20uY24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqXd+tqCHZLWxk ZOv8y8RwAQzHR7HHQ7i/R/Ssbom9oecJDr25jtgFjJuXlNvH66B4qTd6Zbv2FdPA x/+OcK7SE39JGB3vOcGEI8RlT2o/kVAXmyy30gcbtPscOsG2kslL9ZDEUKsSc4WI scIQovZ69e4nDWpzCkjbNfwc/NxJpPhWJPOndqdMIbwCl7laaLKpq/pNWUthvDEe iasx2K7FBykiHBb2JXC/kI5qFd28vR7g87Xdrn9QHbZQJpiCkr6PFFgaw8SAnoVE 24QjQwreVE3sVuctplPrHkhrdgdpD2BbJlADBJmjpMMJgDANUnpLHdanT+9y9BiB jVYtIjzpAgMBAAGjggNEMIIDQDAfBgNVHSMEGDAWgBRFQeOTVHC46aW3lrwmsVh1 Qpc+8zAdBgNVHQ4EFgQU3nWguYb1Pslwk+IOto6oMiN6hlYwGQYDVR0RBBIwEIIO ZWMuY2ljYy5jb20uY24wPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcC ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYu aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1NlY3VyZVNpdGVQcm9DQUcyLmNybDA0 oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL1NlY3VyZVNpdGVQcm9DQUcy LmNybDBvBggrBgEFBQcBAQRjMGEwIQYIKwYBBQUHMAGGFWh0dHA6Ly9vY3NwLmRj b2NzcC5jbjA8BggrBgEFBQcwAoYwaHR0cDovL2NybC5kaWdpY2VydC1jbi5jb20v U2VjdXJlU2l0ZVByb0NBRzIuY3J0MAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5 AgQCBIIBbASCAWgBZgB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb AAABi+smGBkAAAQDAEcwRQIgdL2z8nEXKGrdwvehLDugxOmFFSwTPvhnf8i31yUl jygCIQD40Gz3RNKawMFPS12Q2/QlLcPPn83DuLU9N0RWkRf19AB1AEiw42vapkc0 D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi+smF+cAAAQDAEYwRAIgBK7rlciB jbr6SzFmkcAq076U7PdxBEOgCXjeXJV12l8CIDVxeWz1IJhBhquZpvzU2OSfQp3q v5zCmz2wks5oTPPwAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sA AAGL6yYXygAABAMARjBEAiBfuyFGewj64+Ig1cEV4/aU20vim2UrXLuGrkgmohsS qgIgNWqqfr/7gUmvvagq7LeQ4YpxFAKVzDoOg5q6jSBt/YgwDQYJKoZIhvcNAQEL BQADggEBAH4qHXdU28aNRxWjUPfZHug37v2s1VVfaeGBAbha/AxLK3aEcJYSQGAc xtORXovEVnnu6pcTPrVPuJMsM+j/wNRy63D5+fbaWnT7fTP2wYPdyPTg6qsDZPAD MEjrfiOCmsNxJAevYL36BQhA90Fs83uEPl21WYSjtDCYCNZUqQHkcBYpc/oHPe0S En3RiwZCg5IFwZYeB7UtbFzDl6190Pi3n1fzQQZEn9JYUpfujZRcxeLvmNTtG025 XmWRMxSMNZOHOVc4ixUiuKtlOtHFRGAe8uYnFEIUhTx0j1OqSd7hfD+sxyTx13sR QjPaoBxktiR08fOq1nC5FLHjo5gdM8U= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l3fragh2S1sZGTr/MvE cAEMx0exx0O4v0f0rG6JvaHnCQ69uY7YBYybl5Tbx+ugeKk3emW79hXTwMf/jnCu 0hN/SRgd7znBhCPEZU9qP5FQF5sst9IHG7T7HDrBtpLJS/WQxFCrEnOFiLHCEKL2 evXuJw1qcwpI2zX8HPzcSaT4ViTzp3anTCG8Ape5Wmiyqav6TVlLYbwxHomrMdiu xQcpIhwW9iVwv5COahXdvL0e4PO13a5/UB22UCaYgpK+jxRYGsPEgJ6FRNuEI0MK 3lRN7FbnLaZT6x5Ia3YHaQ9gWyZQAwSZo6TDCYAwDVJ6Sx3Wp0/vcvQYgY1WLSI8 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17587610854133016779576441119376108557 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Site Pro CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '北京市' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China International Capital Corporation Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ec.cicc.com.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29586054230282548342389336699982995483103019538967082370412519183348804425614766501202373451158857600525297314710020029436528294258267961880376926710826872922453365572387468371674245398036732714004559229832951029561415328518299802666983979283786556563539946455536204742572596870853093923700799926430141462231327396762057723355396179230205742998983196102794629862935503343004493659576817709183588991746389462469099113171377565436622024720552765438364210354363358107804150407539944341389269014902159662383975539923245057756941923370057377855687184407693309433702693631253750998322755789621751771865620437779418628373737 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4541e3935470b8e9a5b796bc26b1587542973ef3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) de75a0b986f53ec97093e20eb68ea832237a8656 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ec.cicc.com.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/SecureSiteProCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/SecureSiteProCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/SecureSiteProCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 0166007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018beb2618190000040300473045022074bdb3f27117286addc2f7a12c3ba0c4e985152c133ef8677fc8b7d725258f28022100f8d06cf744d29ac0c14f4b5d90dbf4252dc3cf9fcdc3b8b53d3744569117f5f400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018beb2617e70000040300463044022004aeeb95c8818dbafa4b316691c02ad3be94ecf7710443a00978de5c9575da5f02203571796cf520984186ab99a6fcd4d8e49f429deabf9cc29b3db092ce684cf3f0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018beb2617ca000004030046304402205fbb21467b08fae3e220d5c115e3f694db4be29b652b5cbb86ae4826a21b12aa0220356aaa7ebffb8149afbda82aecb790e18a71140295cc3a0e839aba8d206dfd88 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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