collection80.sncf.com

- SNCF -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 60:40:5f:9b:ee:c5:07:9a:0c:1d:e0:36:a3:88:e8:1d:34:f2:f6:99 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SNCF

Organization: SNCF
State / Province: Seine-Saint-Denis
Locality: SAINT DENIS
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 60:40:5f:9b:ee:c5:07:9a:0c:1d:e0:36:a3:88:e8:1d:34:f2:f6:99
Serial Number (int): 549498690420104243836028893668525296683201001113
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 60:b5:36:7c:c5:78:66:64:cc:63:4d:1e:bc:3c:eb:1c:49:f9:39:44
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): aa:b3:58:57:95:81:90:6f:a7:10:a8:f1:02:bc:9d:38:a4:3a:44:59
Fingerprint (sha256): 08:24:ed:12:44:e2:a2:03:27:55:5f:b3:e5:24:59:a2:e3:89:66:24:2b:7b:68:28:09:9b:78:fc:a9:e6:3e:b0

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate collection80.sncf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for collection80.sncf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

collection80.sncf.com

Other certificates including the domain name sncf.com

(limited to 100 certificates)
connect.sncf.com
*.carmen.sncf.fr
www.programme-voyageur.sncf.com
netkin.eu
evenements.sncf.com
tech.sncf.com
www.webresafret.sncf.com
lebartgv.sncf.com
r.connect.sncf.com
netkin.eu
netkin.eu
recette1.moncompte.sncf.com
mdmvsp.sncf.com
recette1.idpass.sncf.com
*.defi-ingenieurs.sncf.com
*.sncfconnect.com
mdc.sncf.com
acces-authentification.sncf.com
module-photo.sncf.com
candidat.emploi.sncf.com
netkin.eu
reactifs.sncf.com
akamai-san41.exacttarget.com
data.sncf.com
www.margo.sncf.com
www.recherche.sncf.com
piperi.sncf.com
sncf.com
*.fidelite-programme-voyageur.sncf.com
pmad.reseau.sncf.com
www.ter.sncf.com
ressources.data.sncf.com
sncf.com
epublimmo.sncf
tech.sncf.com
moncompte.sncf.com
netkin.eu
module-photo.sncf.com
accessibilite.sncf.com
collection80.sncf.com
www.nouveau.sncf.com
www.candidat.emploi.sncf.com
admins.voyages-sncf.com
emploi.sncf.com
*.collaboratif.sncf.com
espacesferroviaires.sncf.com
e-livre.sncf.com
s2if-gie.sncf.com
goodies.sncf.com
usine.idpass.sncf.com
netkin.eu
netkin.eu
info.portailentreprises.sncf.com
39-45.sncf.com
evenements.sncf.com
recette2.lesinfos.sncf.com
secure.analytics.voyages-sncf.com
e-livre.sncf.com
formulaire.vsct.fr
netkin.eu
*.fret.sncf.com
services.idpass.sncf.com
www.programmefid.com
recette1.info-voyageurs.sncf.com
pro-adhesion.sncf.com
www.portailentreprises.sncf.com
multimedia.sncf.com
int1-tictac.sncf.com
info.portailentreprises.sncf.com
www.candidat.emploi.sncf.com
trophees.sncf.com
abonnement.voyages-sncf.com
tech.sncf.com
netkin.eu
www.programme-voyageur.sncf.com
recette1.info-voyageurs.sncf.com
e-livre.sncf.com
publimmo.sncf.com
netkin.eu
prosynapses.sncf.com
idpass.sncf.com
e-consultations.sncf.com
accessibilite.sncf.com
www.budget.sncf.com
mdmsentry.sncf.com
goodies.sncf.com
netkin.eu
*.ter.sncf.com
info.portailentreprises.sncf.com
preprod.digipass.sncf.com
netkin.eu
recette1.ticketing-sncf.vsct.fr
www.srtpf.fr
netkin.eu
recette1.acces-client.sncf.com
www.feria.sncf.com
hapi.sncf.com
lebar.sncf.com
usine.idpass.sncf.com
www.cv.emploi.sncf.com

Certificate

The complete raw certificate details for collection80.sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+DCCBOCgAwIBAgIUYEBfm+7FB5oMHeA2o4joHTTy9pkwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTE4MTIxMTEyNTE0
NFoXDTE5MTIxMTEzMDEwMFowbjELMAkGA1UEBhMCRlIxGjAYBgNVBAgMEVNlaW5l
LVNhaW50LURlbmlzMRQwEgYDVQQHDAtTQUlOVCBERU5JUzENMAsGA1UECgwEU05D
RjEeMBwGA1UEAwwVY29sbGVjdGlvbjgwLnNuY2YuY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA0jA31OlFYxS+P+IklFbTjAO+MArrqLcfn4FsmNTS
CaP5FAgUOsbytqsD19jO8OoJCtuap9A6vWKJtSxvw8LIhocI5bdS/wicSAu+hGPy
rQp8RSDu+XWK5Kjwy/s7NJNvV3NPU4FBiMYHmSV81cbjR70+04F52TCz/ZTnJ5y1
UMIrbVm9vjbnNh563BuDpT5c9oIAgnNFXfncjcgFKvYQyuyeutyTHOFDkjLOLkUC
gJs0LqzUvS2py05DMkT5hIr+ivVRt22+YSKiPpucMZu0ikdo6c82Ew3PZLYj92Gc
FKnCqe9Cp/X4yZphsr75EInvNvJYmHuw21QoVWEzXwcxSwIDAQABo4ICrTCCAqkw
CQYDVR0TBAIwADAfBgNVHSMEGDAWgBSzEom1qUs1vBUA8IDp2HiH8RN8djBzBggr
BgEFBQcBAQRnMGUwNwYIKwYBBQUHMAKGK2h0dHA6Ly90cnVzdC5xdW92YWRpc2ds
b2JhbC5jb20vcXZzc2xnMy5jcnQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnF1
b3ZhZGlzZ2xvYmFsLmNvbTAgBgNVHREEGTAXghVjb2xsZWN0aW9uODAuc25jZi5j
b20wUQYDVR0gBEowSDBGBgwrBgEEAb5YAAJkAQEwNjA0BggrBgEFBQcCARYoaHR0
cDovL3d3dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAdBgNVHSUEFjAU
BggrBgEFBQcDAgYIKwYBBQUHAwEwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2Ny
bC5xdW92YWRpc2dsb2JhbC5jb20vcXZzc2xnMy5jcmwwHQYDVR0OBBYEFGC1NnzF
eGZkzGNNHrw86xxJ+TlEMA4GA1UdDwEB/wQEAwIFoDCCAQUGCisGAQQB1nkCBAIE
gfYEgfMA8QB3AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABZ51b
5sUAAAQDAEgwRgIhAM0sWC6joVoXXvD3OHBa+T7HFhvFAYd3l/X0uptAEy7bAiEA
vVGAeJqMIu1J9OWeRET4RsJ9PnnxldpCSnBLs6tPiAEAdgDuS723dc5guuFCaR+r
4Z5mow9+X7By2IMAxHuJeqj9ywAAAWedW+ZaAAAEAwBHMEUCIQDXIA8PU58Ds69s
2XC0pHRY+DfqRgV/gT+a5pVoIBbrxAIgI6TPVg3Vls06F2j2LZzvFQpl3B7bRonk
4GuQvTFO7SIwDQYJKoZIhvcNAQELBQADggIBADJkJFn3O5O9/3dGSQeWcck4kxar
mjHRRsJKaHubE8jnpx3Hq3YS12KqC3KcdbqWhGMrGLEtr2ERVAhax20TIW+oUp8f
8WAerqWq3+TMtV8m9LW0a+2gglYkNjfRq2ADNrxru6AilxSQju1Coe6N+8wPyFEb
Mk4ij9Or+pDGM770osyPgz2fBmw/JedzKS4RQ8A37BvVSBw+uk7/Y5lVn0Ua4R5q
RRgU0MWMjJ8+1NeVDDwiD/wxPggxtRyMOETrHrPMFmPU1pFCsxrmnLTRzEBwTg3t
SxBPhGPLZL5MKXHOtB5mxVyxyhPzn7EUHQasoq2KhlLby6PRbbLzZjn3wZOg1oyC
bZ3Ah4Qfs9mHNaiXtOU3HwAd/sytjerpvw6J7aetKQjlQ4emQoqvphIuCZG4VoBs
gj29o0HhIbaR9vmZbvVSmb27z1H8Cpa7NgFN7C8t78qYVojXElyk1rqv4kICDKib
iKtEWqhjvK/VNWnF25eKm0QESMt2OwVACfAamsjD7o002x2keo/YR56aVyUgyQ3Y
aCs1N0WrAvphAS5nK7CaG9akqvIneK5nlzLukk8TB82YLLAQGu1mAKrAwpwBDDGH
2Okv13g/JPsY1xmubbMePZQzdU8/AyDGoj2Seyw54XoOUVWwMSOkOVwi6ehAPpzN
cHsqsLG2PvVTAAiJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jA31OlFYxS+P+IklFbT
jAO+MArrqLcfn4FsmNTSCaP5FAgUOsbytqsD19jO8OoJCtuap9A6vWKJtSxvw8LI
hocI5bdS/wicSAu+hGPyrQp8RSDu+XWK5Kjwy/s7NJNvV3NPU4FBiMYHmSV81cbj
R70+04F52TCz/ZTnJ5y1UMIrbVm9vjbnNh563BuDpT5c9oIAgnNFXfncjcgFKvYQ
yuyeutyTHOFDkjLOLkUCgJs0LqzUvS2py05DMkT5hIr+ivVRt22+YSKiPpucMZu0
ikdo6c82Ew3PZLYj92GcFKnCqe9Cp/X4yZphsr75EInvNvJYmHuw21QoVWEzXwcx
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 549498690420104243836028893668525296683201001113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 12:51:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 13:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Seine-Saint-Denis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SAINT DENIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SNCF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'collection80.sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26533821270482009637092917633418334266729701128498253854032227610074046515833659968753067934519028758109834819117924659056254534082947944045576216158904815442920152007800228745362655134750363494970420093840695136776732956575552841592163497609741372036396728215742484122750525552324853003468524671770824140746963691262520022555021529956693068565023949126205237818946310336723233806087011153843365850818614817410444119922038951138547788898952336337398620941159675318110065749305307330096268877691634083010851676991619292475061033432739162500015265511240228877942239191206014796804767292182811844152925378941528949862731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collection80.sncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60b5367cc5786664cc634d1ebc3ceb1c49f93944
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd000001679d5be6c50000040300483046022100cd2c582ea3a15a175ef0f738705af93ec7161bc501877797f5f4ba9b40132edb022100bd5180789a8c22ed49f4e59e4444f846c27d3e79f195da424a704bb3ab4f8801007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001679d5be65a0000040300473045022100d7200f0f539f03b3af6cd970b4a47458f837ea46057f813f9ae695682016ebc4022023a4cf560dd596cd3a1768f62d9cef150a65dc1edb4689e4e06b90bd314eed22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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