oas-con.migros.net

- Migros Genossenschafts Bund -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 4b:05:3b:c4:cb:ee:ab:35:33:68:1d:26:4c:fe:ba:c8:5d:60:87:9e was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Migros Genossenschafts Bund

Organization: Migros Genossenschafts Bund
Organization unit: MITS
State / Province: Zürich
Locality: Zürich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:05:3b:c4:cb:ee:ab:35:33:68:1d:26:4c:fe:ba:c8:5d:60:87:9e
Serial Number (int): 428291018129067030095398109365701842697550071710
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: a0:77:fc:f9:1c:c7:78:3d:91:97:65:03:09:fb:ed:af:d8:e4:b2:a5
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 39:1e:27:a1:db:ed:1f:57:08:fe:26:18:45:c0:c6:65:6d:76:1c:d7
Fingerprint (sha256): 0c:95:5e:d8:b4:77:33:52:d6:5c:0a:89:80:e2:ef:81:3e:06:0d:9e:fb:f6:8b:bd:21:2a:f9:5b:c1:27:6f:10

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate oas-con.migros.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oas-con.migros.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oas-con.migros.net

Other certificates including the domain name migros.net

(limited to 100 certificates)
ts.mobile.migros.net
ukasolutions-migrosindustrie.migros.net
live.dev.image-upload.mdb.migros.net
idm-qual.migros.net
parkcontrol.migros.net
ext-pi.migros.net
sfd.migros.net
kuva-test.migros.net
staging.prod.pema-coupons.mdb.migros.net
awds.migros.net
qim-appl-supp.migros.net
wsdwh.migros.net
qual.sfd.migros.net
svn.cwi.migros.net
jira.migros.net
artikelstamm.migros.net
d21.mindustry-test.migros.net
q-bw.migros.net
sts.migros.net
m-packaging-bw06.migros.net
wp2.migros.net
test-bivrost.migros.net
staging.qual.mam.mdb.migros.net
neops.migros.net
pim-supp-qual.migros.net
m-packaging-bw04.migros.net
zeugnis.migros.net
zeugnis-sts.migros.net
streaming.migros.net
mcds.migros.net
mlsplus-s.migros.net
mlsplus-t.migros.net
dsapbemignept.migros.net
ltopex-supplier-test.migros.net
sim-report.migros.net
owa.migros.net
intranet.migros.net
smslogin.migros.net
accountant-mpay.migros.net
d-onemindsolman.migros.net
api.idm.migros.net
sso-maps.migros.net
industry-test.migros.net
qual.ts.mobile.migros.net
assets.migros.net
image-upload.mdb.migros.net
finanzarchiv-test.migros.net
epass.migros.net
p99.migros.ch
sapp22.migros.net
sfd.migros.net
p58.mindustry.migros.net
mls-connect.migros.net
ra-sense-test.migros.net
outlook.migros.net
mobilemaps-q.migros.net
ewf.migros.net
d-hr-portal-d30.migros.net
lb-service-url.migros.net
pim.migros.net
hr-portal-p30.migros.net
q-mepcis.migros.net
voucher.migros.net
staging.dev.pema-coupons.mdb.migros.net
login-corp.migros.net
api.commit.migros.net
tagetik.migros.net
parkcontrol.migros.net
octane-uboot.migros.net
cumulus.migros.net
assets.migros.net
helpline.prod.migros.net
obsonis.migros.net
pos-upload-test.migros.net
staging.prod.kms-portal.mdb.migros.net
srm.migros.net
pim-q.migros.net
ctx.migros.net
mura.migros.net
boe.q-bw.migros.net
oas-con.migros.net
login-azure.migros.net
dataintegrationhub.migros.net
d-hr-portal-d30.migros.net
qim-q.migros.net
migros.net
transfer.migros.net
pmls.migros.net
group.m-mobile.migros.net
test-mlsplus-help.migros.net
d-rechnungswesen.migros.net
idm.migros.net
sim.migros.net
ltopex-supplier.migros.net
login-schadenportal.migros.net
ra-sense-test.migros.net
suppliernet.migros.net
migrosticino.migros.net
integ.migros.net
login-schadenportal.migros.net

Certificate

The complete raw certificate details for oas-con.migros.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+zCCBeOgAwIBAgIUSwU7xMvuqzUzaB0mTP66yF1gh54wDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTE4MDQxNzExNDgz
MVoXDTIwMDQxNzExNTgwMFowgYMxCzAJBgNVBAYTAkNIMRAwDgYDVQQIDAdaw7xy
aWNoMRAwDgYDVQQHDAdaw7xyaWNoMSQwIgYDVQQKDBtNaWdyb3MgR2Vub3NzZW5z
Y2hhZnRzIEJ1bmQxDTALBgNVBAsMBE1JVFMxGzAZBgNVBAMMEm9hcy1jb24ubWln
cm9zLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMdUSs+JFNzv
pSQKDvhFwi5D+vYBcnMmBcYWzhMNp4VvYzJaajoFp3OXpXaHUy9Q9uvhlelsZDDu
A1aywmn1S41KiNwr+8lYe3/pbn6RDj4ychhtulTSi4SFj3+E8wkSole5tqemvle1
WQeu8NVqvVxXCXKFrBu4kOpq8A2YmfTin842iqZjKkVFgdcdVAy52AYPSg5BA05b
hpqwZ38E5xekAcfzF0MCgoia4XvyKgLylOBtP4n5gajWEIBSfGYd4ZFFjHe9VMfG
S8IOPHCN5+zQ6coCBFY0RGbdz68itU2miZBlUBJiPOdjaI8io1aV12an5cFuQsPv
viIVgr6b62MCAwEAAaOCA5owggOWMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUkRli
rVsXpzD78N45JbG9jLm4UScwcwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAChito
dHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzIuY3J0MCoGCCsG
AQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wHQYDVR0RBBYw
FIISb2FzLWNvbi5taWdyb3MubmV0MFEGA1UdIARKMEgwRgYMKwYBBAG+WAACZAEB
MDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3Jl
cG9zaXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMDoGA1UdHwQz
MDEwL6AtoCuGKWh0dHA6Ly9jcmwucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzIu
Y3JsMB0GA1UdDgQWBBSgd/z5HMd4PZGXZQMJ++2v2OSypTAOBgNVHQ8BAf8EBAMC
BaAwggH1BgorBgEEAdZ5AgQCBIIB5QSCAeEB3wB1ALvZ37wfinG1k5Qjl6qSe0c4
V5UKq1LoGpCWZDaOHtGFAAABYtN4fAkAAAQDAEYwRAIgMnFvASikMsynSVpPBf8x
ymV42rAiw/jwD5pbGBBp5zYCIDWT575ZMB8LGE9PJlb+vSUou/fOp4jE9Ou+a9VF
ffs8AHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFi03h8NAAA
BAMARjBEAiAE2vMqSVPeL++GJjL/CLAozjhHqEWdf4tf1rf5taDNCAIgEulWA09Y
4OINqcbk8oMPYvlOvx+iJo6IZJfZ6lgmkrQAdgBvU3asMfAxGdiZAKRRFf93FRwR
2QLBACkGjbIImjfZEwAAAWLTeH4hAAAEAwBHMEUCIGrVX6pf8995cS2lJFmtMBpv
q1KFtbtg2DimyHc8/0mnAiEAtJMXglz3KNf/+btXlsnrobuXKUIp0jAu/jF1L6e4
+cEAdwBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAWLTeH4dAAAE
AwBIMEYCIQC+REUPWOFMHvPG5OgCFLedPOSz2SEz7YeyQW/dna3GMQIhALKW38N/
FoN/EMVpz+7CVh4GRgv42dcN67AqTzb1UoemMA0GCSqGSIb3DQEBCwUAA4IBAQAR
5ymEv7MWK3TywDTVk2RIZxVl2xftLXv0+zrt7DLPp3iNBa52QtZHXknUDeXkNTAg
w4Js+nZFnVlo5p4m/7LtsyBDwGtE+WEafNqWSWJHrDoVLL3PbZSHQap+LjuGMLZN
p78Fsub/ytm/1RF7CPTZtbYxphzAFrSBQjtnGIdF0vesmhKLWwyVdOl7XcUwVDH2
RFvk+Y3T+v1wH/JwbOree/anoM+9h05kk6eYNI3fMqqJkPP362YJrx1qL2pWSzMx
cHJkrbvhRGHC13GWw4dj6hmYYrLsgwiWqwPpMQVO5M+3ibY2c28DGK/dVV7F8eWK
PsMqd5kECWOBvF2GMFoo
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1RKz4kU3O+lJAoO+EXC
LkP69gFycyYFxhbOEw2nhW9jMlpqOgWnc5eldodTL1D26+GV6WxkMO4DVrLCafVL
jUqI3Cv7yVh7f+lufpEOPjJyGG26VNKLhIWPf4TzCRKiV7m2p6a+V7VZB67w1Wq9
XFcJcoWsG7iQ6mrwDZiZ9OKfzjaKpmMqRUWB1x1UDLnYBg9KDkEDTluGmrBnfwTn
F6QBx/MXQwKCiJrhe/IqAvKU4G0/ifmBqNYQgFJ8Zh3hkUWMd71Ux8ZLwg48cI3n
7NDpygIEVjREZt3PryK1TaaJkGVQEmI852NojyKjVpXXZqflwW5Cw+++IhWCvpvr
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428291018129067030095398109365701842697550071710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 11:48:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 11:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Migros Genossenschafts Bund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oas-con.migros.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25162988735671727584708248705877346188385871955043230314998865504203337404368614823623979608114731859306975033295124951650653107817457405940485716679614353590072894569173441443281643392344304802552732451553864418051643717973445508874226040313548962374178991982160686285433520271907026967178405418782301213474788406184506575519682892585946332400742928528588553418516625679445444962589700141900804363689874759994788665453869128012385156166280474030731338615282103391229620225617494126347363035188628230832211163761171833243595737966254301963706593499864867360109750657464202731451428221363420400633883163274530227219299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oas-con.migros.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a077fcf91cc7783d9197650309fbedafd8e4b2a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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