cdn.plaid.com

- Plaid Financial Ltd -

Issued by QuoVadis Qualified Web ICA G1

About this certificate

This digital certificate with serial number 61:24:dd:34:30:ce:e7:31:89:ec:12:f8:ae:b2:95:65:80:2f:24:2b was issued on by QuoVadis Trustlink B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Plaid Financial Ltd

Company registration number: 11103959
Organization: Plaid Financial Ltd
State / Province: London
Locality: London
Country: GB

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 61:24:dd:34:30:ce:e7:31:89:ec:12:f8:ae:b2:95:65:80:2f:24:2b
Serial Number (int): 554594201171810781299036631536100432142712906795
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 82:13:89:c9:19:c8:4d:04:11:c2:6a:22:b3:d7:4c:02:9d:9a:f6:aa
AuthorityKeyId: 04:bb:04:d7:9d:d8:7d:1c:d9:e4:f0:54:bd:8c:3c:b6:32:de:76:34

Fingerprint (sha1): c2:8a:82:8b:5f:5d:0f:4c:40:db:87:73:c1:6c:48:5b:28:e6:d7:35
Fingerprint (sha256): 0f:00:71:84:e5:bc:96:7f:64:bb:bf:d0:1d:84:64:8a:52:78:58:45:62:94:c7:d3:a4:25:28:c0:3f:f9:f8:2d

Issuing Certificate URL: http://trust.quovadisglobal.com/qvqwebg1.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvqwebg1.crl

Check the revocation status for certificate cdn.plaid.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.plaid.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.plaid.com

Other certificates including the domain name plaid.com

(limited to 100 certificates)
*.plaid.com
*.plaid.com
*.testing.ue1.plaid.com
em.plaid.com
*.plaid.com
support.plaid.com
*.plaid.com
api.dashboard.plaid.com
ac.awesomedrives.com
*.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
ac.awesomedrives.com
*.tartan.ue1.plaid.com
ja.riws.status.ricoh.com
*.plaid.com
*.prod.ue1.plaid.com
ac.awesomedrives.com
production-card.plaid.com
*.plaid.com
*.k8s-batch-2.prod.ue1.plaid.io
*.prod.ue1.plaid.com
amex-prod-api-20230127.plaid.com
consumer-portal.prod.ue1.plaid.com
*.plaid.com
api.my.plaid.com
*.plaid.com
api.dashboard.plaid.com
*.plaid.com
ac.awesomedrives.com
*.plaid.com
*.sandbox.ue1.plaid.com
*.testing.ue1.plaid.com
*.prod.ue1.plaid.com
api.my.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
cdn.plaid.com
support.plaid.com
tines.plaid.com
tines.zdrake.com
*.plaid.com
*.prod.ue1.plaid.com
my-testing.plaid.com
*.prod.ue1.plaid.com
euwest1a.tines.com
*.util.ue1.plaid.com
*.prod.ue1.plaid.com
api.dashboard.plaid.com
*.testing.ue1.plaid.com
ac.awesomedrives.com
api.my-sandbox.plaid.com
*.plaid.com
citi-prod.plaid.com
*.testing.ue1.plaid.com
envoy-cxp.tartan.ue1.plaid.com
production.plaid.com
ice.status.symantec.com
api.my-testing.plaid.com
api.dashboard.plaid.com
ice.status.symantec.com
*.plaid.com
production.plaid.com
ac.awesomedrives.com
envoy-cxp.sandbox.ue1.plaid.com
*.plaid.com
fin.plaid.com
fin.plaid.com
go.plaid.com
*.prod.ue1.plaid.com
development-card.plaid.com
*.plaid.com
*.plaid.com
citi-test.plaid.com
cdn.plaid.com
*.plaid.com
plogger6.plaid.com
*.testing.ue1.plaid.com
api.my-commits.plaid.com
*.plaid.com
support.plaid.com
api.my-development.plaid.com
api.dashboard.plaid.com
api.my-sandbox.plaid.com
*.prod.ue1.plaid.com
ja.riws.status.ricoh.com
*.tartan.ue1.plaid.com
k8s.plaid.com
support.plaid.com
ac.awesomedrives.com
metrics.plaid.com
ac.awesomedrives.com
*.testing.ue1.plaid.com
*.testing.ue1.plaid.com
ac.awesomedrives.com
ac.awesomedrives.com
px-integration-validator.testing.ue1.plaid.com
ja.riws.status.ricoh.com
api.plaid.com
pa-vpn2-ext.util.ue1.plaid.com

Certificate

The complete raw certificate details for cdn.plaid.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxH/o41pGcbW2LxvGkF0
+hsJIJyHvHQgmmhfBoHkBdMyt1jC8DvSnZw8WseGtXBi8tbngOUyUT8K7iydjf8Y
ggS15InKnCA1xWswzn/+xTVQrEJ09gU5xR3VjWd+mJidOiS0NAODQZhqUUWXu1Q6
zwgFw7KAAsIni5vL+136rbInCuEsbBExy/GiiduBQcu6JnL1xrxLaDLHvKVftkao
vHz2fnuy59R7Td3rf2wUKdpw4O/3xfMG6DErqK9JROrBq7Clpi1ZrJ7HBJuP/WPQ
4JUZr0vlgfoO0YSNx+Y0NKSgo5Q2OE944aF7oiVj+UqOCK4FscftVxEI3AwlRS8S
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 554594201171810781299036631536100432142712906795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-30237459'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Qualified Web ICA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 14:06:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-09 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '11103959'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PSDGB-FCA-804718'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Plaid Financial Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cdn.plaid.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25130298123451744135727658833461949579300325340806699287831538401040785718488699740188421535721716989876996933520869255492142231504505983728385341138781162326363947991148730015320208223051337409519908084852797864717324761423084105374310091151707598764881125396661476191580371285510530809754231845114640493070470103329537141698029186227044373555680325255190312364403664912173882983719478665855643306094266762587312704775284854160283719928972712338776452748364863486040600958680051180748741874014997086357708994151640397415727265083412118894650531510952861215081181004077553806940015733010963619707197838025798737400361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 04bb04d79dd87d1cd9e4f054bd8c3cb632de7634
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvqwebg1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.plaid.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.194112.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.19495.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.1.450
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.3 (qcStatements)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.11.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.1 (etsiQcsCompliance)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'en'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.19495.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.19495.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PSP_PI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.19495.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PSP_AI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Financial Conduct Authority'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GB-FCA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvqwebg1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							821389c919c84d0411c26a22b3d74c029d9af6aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00408576bdc4c1fbd969cd0055c4527889a751680f6ece7f4eb7eea63c6b2a3225416384167c9ff90ecc137a85b05b83cd967efe21dda6cfa1f5f4ca30b562bceaea67d247b1149458205d205057e5ee967f761343be4a3ea5ffe552d7f45257491633fc7cc703e5a9f3e18677274edc9ea0c8c09e6d1a5691c78d2ceb32f2d687723fee6f1e0634d223718cfe0813eacb9574fcfee4b951cf7f486a1dfb77a9d1d203154c607a8d26c774478420a733af20f14f3515ffbcb396fb9bc3e9e1a3bbb2cb5a73481a08d40b9e7f869eea8521ab15edb8ba5dabf6172842997312a5353374e6383d3968d9a506c97aa6c3c479d36f95f9306a387a604238f721a542fe68c59ac8978c44835ae3a54098d388e940faf0402bbdc612ea2fef85bda27b198feab2d06bf7876789a5255fb81dfcfaaf676637a82d9e395ae86c6e9f774802077af92997673c7f1deb07c9654d3bb73944e189ce7545aa5ba5720a0494527d5a4b6607d37bca698bc5dbc49bd47c92e436a7ae34c1489664fb43d3932b37de4cb6d80157b38d4549b52c21191cb2fe30f9811b70fb4f537b359f74b36181b0671f9a06350af60d745281beefa104371fed70300b43a010daa054600cd0b3df1d8fc490ec990552a3b75db576c1fab8993732e4efc3adab8e3c484517b532af7f472c6e886cc630eef3680c099300892ae1f31b1ace9d3363f0991b26f8bcf2