fkr-gesu-web.astra.admin.ch

- Bundesamt fuer Informatik und Telekommunikation (BIT) -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 6e:c1:33:58:5a:5c:e0:96:58:4b:44:87:d9:e3:d6:d2:cb:df:49:06 was issued on by QuoVadis Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bundesamt fuer Informatik und Telekommunikation (BIT)

Organization: Bundesamt fuer Informatik und Telekommunikation (BIT)
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 6e:c1:33:58:5a:5c:e0:96:58:4b:44:87:d9:e3:d6:d2:cb:df:49:06
Serial Number (int): 632297501405482332850054884524913498493177252102
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5b:c1:ef:51:54:62:b3:7a:4c:05:9c:45:54:94:d7:6e:fb:26:71:e4
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 17:90:4b:3f:f0:1f:c7:0f:87:b1:66:23:3c:66:b0:81:6f:d4:72:da
Fingerprint (sha256): 02:5a:7b:ef:a8:90:1b:06:7a:b1:7e:df:58:68:dd:78:95:7e:f9:06:63:91:32:c8:03:d0:44:e0:7e:3b:a0:2e

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate fkr-gesu-web.astra.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fkr-gesu-web.astra.admin.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fkr-gesu-web.astra.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
datavis-a.bfs.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.vega.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
www.edoeb.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
sts003.bafu.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.cmsp1-r.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch

Certificate

The complete raw certificate details for fkr-gesu-web.astra.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOzCCBSOgAwIBAgIUbsEzWFpc4JZYS0SH2ePW0svfSQYwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTI0MDExMDE1MjAw
NFoXDTI1MDExMDE1MTUwMFowgZExCzAJBgNVBAYTAkNIMQ0wCwYDVQQIDARCZXJu
MQ0wCwYDVQQHDARCZXJuMT4wPAYDVQQKDDVCdW5kZXNhbXQgZnVlciBJbmZvcm1h
dGlrIHVuZCBUZWxla29tbXVuaWthdGlvbiAoQklUKTEkMCIGA1UEAwwbZmtyLWdl
c3Utd2ViLmFzdHJhLmFkbWluLmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAnDnYXpO4pWYvzPgpDHDvdoRJ07rdftic7O9Qlh+fePEWeyy+/rIKAENq
UGtSracUbnDm0ieQW+MHn2v2/V1ZgPauAJaLap2HVcdTwvJ9QLSyeGNX5tRxWl56
xiO8UBF0xeA4mbBlgCGDwXu3s9qGWNO+D6XLc5vDzLpurZE2jOBY3QAhLHrukazU
Z8N3yP3M6WVNfoyOkLxaeFo3UGyomiMaCJfDUqohfzdfL5dvRSm6eq+TY8+Vm6Ic
n7W7ptYFXhoMlX9njqry9yWnVM1oQSUWhJp7I96WS9/7GQbQtfYlIjdfRULOgM6O
6wLo8SGImX4kn4qNUGCoReYuoWGOCUFlO9t5ZBXtyjoxC9+6SprFSA9QHrYrYxg0
qHwy3NIUmrXChDdtQTKk8LC/Lx423l9ddLoZUbJ38NrKvyr6zcNDvVjcqEB4iERu
IDDHVziLNg3aRHSmJoRORSoP5RxYZWP1j+DPGtIeHDEWMV3N08cUqNQpfdYnxhKV
vAFIMf/huvPfv4knWpmg+LYXZaqN41QUWGpizO6ds/lq/F+2ALQSgzZOeVFKnMyh
PW2+V525YVy0vJPuYQoSnArQwPMQ+ZPNXEqWSxnZOl2XEePIZrUL/bgGSB5LNdkO
38fChY/+f86i4uHTAmygITGgHOjQ4VksVBCbU874YL4gZPGVYFkCAwEAAaOCAcww
ggHIMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUsxKJtalLNbwVAPCA6dh4h/ET
fHYwcwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3QucXVv
dmFkaXNnbG9iYWwuY29tL3F2c3NsZzMuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8v
b2NzcC5xdW92YWRpc2dsb2JhbC5jb20wJgYDVR0RBB8wHYIbZmtyLWdlc3Utd2Vi
LmFzdHJhLmFkbWluLmNoMFsGA1UdIARUMFIwRgYMKwYBBAG+WAACZAEBMDYwNAYI
KwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRv
cnkwCAYGZ4EMAQICMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNV
HR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNz
bGczLmNybDAdBgNVHQ4EFgQUW8HvUVRis3pMBZxFVJTXbvsmceQwDgYDVR0PAQH/
BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQBL
b1TmbuqFslij65Akf/Obj9AbRalx2O6jdGPj5VzB6snNh3OcHL2q8MoJzPsIUnfm
ZT0NLVpvJNC0L6t5JsmN7zmNVRmQgZJILeG2IEqY7OSxkWA9eHj8UrObdZ+9bFjx
92j2si7WEH6fMaiuL1TdFs0/Mmi6j/Mr92bp8R/ZirO+uaLUXQjLLJTDSrHQLu9X
HRkmaiuCNaqOiBuEYPUlosa8mRaZ9nbLa9xxWJL4Wf6gc88RtgelOpRCO6BzguwV
2J9yYuhSfzBVpHUe5hu7watXCDMlAUG9bgTD4mIdOmb1qFxPWXY0+P6hPoQWl3Wr
TDAX2bbdTu5PSI/dB/9ChIiPHuBOxDozs2a+OrD80zbx1XzVdIwVFBU5F01gyCaY
QJxedPnfkS4zwg1otyGCRQzMkNVlBMK+mjKGoCjnzxCUBJC3Tcekse21B5fMzgVu
46SOds6S3MGfUUqddwJEBCxS08CH19dZn/ZHX2D+nL1cmtlq0XuuN7cGa+SjWd7o
GNnU66bs99dhTezMVGDzrWiOLZSoo2+B9W2RHe9ZW5OehvLcOXTxss3QAn2mg3pb
fJ7qN0PT74OOknIEZQolRSbQ0xbxQwn7bSvhwN8bZNJOWTmvdwbbI/wW5SvpnGj8
pzR+0KWtPc94PQLAHYDe3tbDKreGQKJdq+yfG1TR4g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 632297501405482332850054884524913498493177252102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 15:20:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 15:15:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation (BIT)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fkr-gesu-web.astra.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 637346301951063832608621630173340015589861274575411006984877538800808349032094468351307779322231769828495985285878494014311292890104075460263186815125744236613994194248086692573493747664696267933913061534560979011683229442051626727968952210655524587771046748804724833504510822199292298297332894336265582915669467064970857039110484836888546601273201561000008571046336940436231849432256957880801371966010388062202070469991263366534680144270799832776604519143400661680566860223630879421280471580690206508758992835078186117961745731806610643394449454296457364916612113739606985389594062283363231139517766260550734692026446282386468381116484348984751016747904005482594302297411567771423271082499507410151311305901560424969545358522051947527254396693575559498036144659146342542647327991715193125864640448747405729939490322248473608245378531933453895265269434064180793612818467261359880575102324533126921457036175936745672272790083803331517087752916347134125746451581478284300680532459326006481168258051930352069557784839897992455935679448373162902482305178858280955593514821076448158373607951794669752308225435904860954067958834835967856721118554067650365584938379143758211905666402841923373618552617418165805425120674188921438383902122073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkr-gesu-web.astra.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bc1ef515462b37a4c059c455494d76efb2671e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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