apollo.ot.vgz.nl

- VGZ Zorgverzekeraar N.V. -

Issued by DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

About this certificate

This digital certificate with serial number 03:53:2a:77:6d:31:04:53:1e:83:ef:80:a3:08:ae:47 was issued on by DigiCert Ireland Limited.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

VGZ Zorgverzekeraar N.V.

Organization: VGZ Zorgverzekeraar N.V.
State / Province: Gelderland
Locality: Arnhem
Country: NL

DigiCert Ireland Limited

Organization: DigiCert Ireland Limited
Country: IE

This certificate will expire on

Certificate Details

Serial Number (hex): 03:53:2a:77:6d:31:04:53:1e:83:ef:80:a3:08:ae:47
Serial Number (int): 4419505949760954737925715088342822471
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 78:65:2f:42:fe:8f:30:00:14:a9:b1:76:b4:a8:c3:92:f0:d0:0d:e4
AuthorityKeyId: 18:89:e7:af:f0:28:f6:7c:ca:68:05:52:e1:62:d8:91:d6:16:65:60

Fingerprint (sha1): 8b:b1:fc:c1:51:67:36:5f:27:20:b8:f7:50:f7:3d:7d:c6:28:20:71
Fingerprint (sha256): 12:a7:11:18:c6:2d:81:16:68:f5:19:e1:b7:c3:10:6b:28:75:57:39:00:ab:32:61:76:ae:e4:31:26:c4:63:9c

Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.eu
CRL Distribution Point: http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl

Check the revocation status for certificate apollo.ot.vgz.nl

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apollo.ot.vgz.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apollo.ot.vgz.nl
apollo.at.vgz.nl
apollo.pls.vgz.nl
apollo.opl.vgz.nl
api.apollo.ot.vgz.nl
api.apollo.at.vgz.nl
api.apollo.pls.vgz.nl
api.apollo.opl.vgz.nl
apollo.ofmmock.at.vgz.nl
apollo.ofmmock.ot.vgz.nl
apollo.ofmmock.vgz.nl

Other certificates including the domain name vgz.nl

(limited to 100 certificates)
feedback.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl

Certificate

The complete raw certificate details for apollo.ot.vgz.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvzRvnDHWjZUEE3R0gbs0
1Z0QaxxeKJu/I+0W31SMMNMycGwf/R6o3/vcgrNnjZF+LNy9KUA92wNJ+uOKXK7Q
7YnHWhu+GATMF+xCTCRE+SOCX+4Hi+5hlf4gkNZtTQDA3H1xc/vNA9fk19aKf0LT
/s9IqzuCTJh1y66vgbMxwEhTu7lmyp6IyLxlbC+zXu+aeQEAkHSMIflIpzzNLhcx
zFvMcOejRLstE3k11Vt4oQUfnhsm9smzsILr1jsX8XBl4knVfMhnjFe2jrwBxYrR
mJQKVTf1UMaCUdBGYcnayTQXJNLU9gAjNfVj+0Rjk8LLQ/elR8Gvbik8L4Eeyg1j
vahQSveJbQohMfpknvUH12rh8B4oLbd9dNOthRevderkzxiCESOHES4oEn5LCitP
LWFf0wUGwbfgmP+vc9Mj21FZwTAWTUgary5Y4mETaMcsj9Ki7b3ij5CvRfoOf55c
sBmiJjhAcPASV9e0ZeMhu1USRdt6J9JhpaxgbUVLat2LMEwL3IJ9gQm/0PaFGgrv
x/Sfj68nGwwez/phenn8+8cP8qSKLVbY0HTDcNtb4wK5tayf6D4m3r5kUafTQ64X
ddRTpd3Jw5WN8UiJ3io1go2o9Gr7kNndaatKvEvSvcIFSItGGKLWNmjl11tyMvaL
m0MEuDmdDKBG4nDhqNUSBi8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4419505949760954737925715088342822471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arnhem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VGZ Zorgverzekeraar N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apollo.ot.vgz.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780047642471894623088923333004996546936694748052135692816612645910165503544532906506285770527381789937285183788202661959798592830855641199826165586004368248563575759814371242358428533539202830256553306105088514959952008931093759850603839679984483662190941817329902605870756067431077283234956579755378223480331234387453318974739720370711022599698930756530941677402194840277415578579606008052223426079998356023407491706751094976626432771337091434532406384323047841381157035589125407496248160878097318865136883781476047590405869155543653166156112554675632765215292677565095550251365711742958398456778876678826005442833490421635708921159380545931759560311129284500001157382819560513948079707413538789333549300085574116830682650247571007639471390087405482532084299946266519451787737625266806171356907363740005561046932612907832371251838259807033821023273281285525577941578032352475927640804223251105667548983261857051096224610942028657392268692065919325202347388688643642974291400320987047487308919496845439880719608640040567155972449597247853426194751498858455825256579452748005576685739114234903693644180546518140732772713577462290966779836428341376537077463434224679328345708322072498063139088822412475432299540722065335788655881618991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1889e7aff028f67cca680552e162d891d6166560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78652f42fe8f300014a9b176b4a8c392f0d00de4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ot.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.at.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.pls.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.opl.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.ot.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.at.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.pls.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.opl.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ofmmock.at.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ofmmock.ot.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ofmmock.vgz.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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