webmail.medschl.cam.ac.uk

- University of Cambridge -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 68:36:ad:13:64:d1:c2:d2:39:09:e8:f8:9a:b4:a6:5d:1e:fa:e8:6c was issued on by QuoVadis Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Cambridge

Company registration number: 1 Jan 1231
Organization: University of Cambridge
State / Province: Cambridgeshire
Locality: CAMBRIDGE
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 68:36:ad:13:64:d1:c2:d2:39:09:e8:f8:9a:b4:a6:5d:1e:fa:e8:6c
Serial Number (int): 594954357431243071255345792567918662296585037932
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 38:d3:ee:d0:22:93:83:53:6d:69:18:6b:66:f0:f2:58:57:cc:3b:98
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): f8:eb:7f:f6:64:ed:14:08:f4:22:c7:f9:dc:cd:4c:45:63:de:49:fe
Fingerprint (sha256): 00:66:37:ba:07:29:90:1e:59:ff:1e:ad:9e:12:cc:a7:a8:d4:65:df:18:7a:c6:c3:b2:de:50:f9:1d:26:f0:04

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate webmail.medschl.cam.ac.uk

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.medschl.cam.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.medschl.cam.ac.uk
mail.medschl.cam.ac.uk
autodiscover.medschl.cam.ac.uk
me-cas.medschl.cam.ac.uk
me-mail.medschl.cam.ac.uk
pop.medschl.cam.ac.uk
imap.medschl.cam.ac.uk
smtp.medschl.cam.ac.uk

Other certificates including the domain name cam.ac.uk

(limited to 100 certificates)
2015.gaobase.admin.cam.ac.uk
moorhen.magd.cam.ac.uk
iccs.cam.ac.uk
eh-ups1.net.homerton.private.cam.ac.uk
appleprofiles.csx.cam.ac.uk
www.payment.wolfson.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
cam.ac.uk
suport.staff.utcluj.app
helpme.agilico.co.uk
webmail.medschl.cam.ac.uk
webserver.srcf.net
admissions.emeritus.org
*.st-edmunds.private.cam.ac.uk
www.jcr.magd.cam.ac.uk
cudl-prod-dev.lib.cam.ac.uk
darknessvisible.christs.cam.ac.uk
wiggum.educ.cam.ac.uk
cmih.maths.cam.ac.uk
www.kings.cam.ac.uk
www.cl.cam.ac.uk
infolib.blog.jbs.cam.ac.uk
www.lrc.girton.cam.ac.uk
winnie.srcf.net
webmail.mrc-mbu.cam.ac.uk
willow.csi.cam.ac.uk
mrc-epid.cam.ac.uk
www.cardiovascular.cam.ac.uk
whittle3d.eng.cam.ac.uk
accreditation.lumanity.com
apps.newn.cam.ac.uk
falcon-course.csx.cam.ac.uk
itservices.phy.cam.ac.uk
alumnicredentials.kcl.ac.uk
www.amest2020.eng.cam.ac.uk
camtools.admin.cam.ac.uk
go.jbs.cam.ac.uk
svr-swm11-bluespec.cl.cam.ac.uk
webapp.prod.rh-ballots.gcp.uis.cam.ac.uk
www.cne.psychol.cam.ac.uk
admin.phone.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
learnonline3.cisl.cam.ac.uk
faraday.cam.ac.uk
econ.cam.ac.uk
intranet.geog.cam.ac.uk
achievements.launchyou.com
www.rnd2016.eng.cam.ac.uk
myip-external.uis.cam.ac.uk
shop.girton.cam.ac.uk
svr-rnw24-bsdcam.cl.cam.ac.uk
production.media.cam.ac.uk
imaging-xnat.cruk.cam.ac.uk
dada.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
gradoffrt.maths.cam.ac.uk
cucmpub-a01-ms.phone.private.cam.ac.uk
www.syslog.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
staging.apply.graduate.study.cam.ac.uk
live.deposit.dps.lib.cam.ac.uk
scop.mrc-lmb.cam.ac.uk
websvr-dev.newn.cam.ac.uk
pnp.arch.cam.ac.uk
heliconius.org
everify.cam.ac.uk
stage.learn.jbs.cam.ac.uk
map.cam.ac.uk
jbs.cam.ac.uk
www.eu.admin.cam.ac.uk
www.ccbi.cam.ac.uk
www-library.ch.cam.ac.uk
www.cbsb-4rdatabase.medschl.cam.ac.uk
www.cccw.cam.ac.uk
safety.eng.cam.ac.uk
www.interfaith.cam.ac.uk
helpdesk.centurionukrs.com
www.map.cam.ac.uk
achievements.launchyou.com
camtools.cam.ac.uk
inter-ace.cl.cam.ac.uk
alumni.d9.staging.drupal.uis.cam.ac.uk
*.lib.cam.ac.uk
www.seniortutors.admin.cam.ac.uk
heritage.arch.cam.ac.uk
mi.eng.cam.ac.uk
sensorid.cl.cam.ac.uk
steth.eng.cam.ac.uk
xnat01.wbic.cam.ac.uk
www.eprg.group.cam.ac.uk
web1-test.dns.cam.ac.uk
www.winton.phy.cam.ac.uk
www.digitalhumanities.cam.ac.uk
www.ch.cam.ac.uk
www.ccs.cam.ac.uk
www.laman-lab.path.cam.ac.uk
gitlab.dtg.cl.cam.ac.uk
h2-cluster.plantsci.cam.ac.uk
forms.girton.cam.ac.uk
fwmgmt.robinson.cam.ac.uk

Certificate

The complete raw certificate details for webmail.medschl.cam.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU3aClEGFBX3KV8XjGt9
qcYv+2hsZwvgFeiq9fWsSrRSE7j0GRXsaCwefbpmmW7t6YcVB6OMHgyCqGfsw3Q/
4P16F6Jmqx8vV9I95Ti41RFZy20vex7duUyo9Wjz3ixAjaZy/MWxTCrcSeLndhgs
6Q/e2yaBvTkjm6C6FrUMsrzuoGLwenGqMB5sHsUToEblcFKTwOK/sD4JdTU1ldkZ
KIZ4cGcPE65xfzPAfFd5+rjcgelXmwzebOJeTYw0HdRdg33GCaLsZteHo6Ob1GVE
iLiSsJdlHBllyKMPkb+7TZ8ND2MEIwFLWvkZDXYnqqw6/GGFSn5s1Z/cpV7E1txL
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 594954357431243071255345792567918662296585037932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 13:23:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-01 13:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Jan 1231'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cambridgeshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CAMBRIDGE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webmail.medschl.cam.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21372663653174258875598834533396786813950814332212441291578476578812856657572150374663097415226738282800641046889630070035166058869422345694800741081649683877999536817484388465003037527407609330631353921536369046624998571987935008184892789655523003593353229370260987892926761345362437883477161279474867654218367053433282246341611792999461865728597517349912655973434210268056983010983532241636810364314573091049147288385416306236487830539821650282846559555970533311809012121922735261248720982204817014048629883674936055864950940400882671419244550708623778823217487300195252863397132057533018996430997366972167824886567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.medschl.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.medschl.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.medschl.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me-cas.medschl.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me-mail.medschl.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.medschl.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.medschl.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.medschl.cam.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38d3eed0229383536d69186b66f0f25857cc3b98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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