apollo.ot.vgz.nl

- Coöperatie VGZ U.A. -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 7b:70:29:21:31:1e:45:4b:95:55:d0:3b:f4:46:84:65:ab:e4:5a:f8 was issued on by QuoVadis Limited.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Coöperatie VGZ U.A.

Organization: Coöperatie VGZ U.A.
State / Province: Gelderland
Locality: Arnhem
Country: NL

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:70:29:21:31:1e:45:4b:95:55:d0:3b:f4:46:84:65:ab:e4:5a:f8
Serial Number (int): 704707131171898348007419274939392803116973054712
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 78:65:2f:42:fe:8f:30:00:14:a9:b1:76:b4:a8:c3:92:f0:d0:0d:e4
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 27:e5:e7:b6:a8:b2:ad:19:57:38:ed:ef:f7:51:e5:84:f7:e8:0c:74
Fingerprint (sha256): 13:78:e1:57:f9:d8:04:96:b6:85:91:5c:1a:20:ec:89:ff:b9:c2:0c:40:7d:7d:b4:b1:12:28:1a:1b:ad:63:c3

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate apollo.ot.vgz.nl

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apollo.ot.vgz.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apollo.ot.vgz.nl
apollo.at.vgz.nl
apollo.pls.vgz.nl
apollo.opl.vgz.nl
api.apollo.ot.vgz.nl
api.apollo.at.vgz.nl
api.apollo.pls.vgz.nl
api.apollo.opl.vgz.nl
apollo.ofmmock.at.vgz.nl
apollo.ofmmock.ot.vgz.nl
apollo.ofmmock.vgz.nl

Other certificates including the domain name vgz.nl

(limited to 100 certificates)
feedback.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl

Certificate

The complete raw certificate details for apollo.ot.vgz.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvzRvnDHWjZUEE3R0gbs0
1Z0QaxxeKJu/I+0W31SMMNMycGwf/R6o3/vcgrNnjZF+LNy9KUA92wNJ+uOKXK7Q
7YnHWhu+GATMF+xCTCRE+SOCX+4Hi+5hlf4gkNZtTQDA3H1xc/vNA9fk19aKf0LT
/s9IqzuCTJh1y66vgbMxwEhTu7lmyp6IyLxlbC+zXu+aeQEAkHSMIflIpzzNLhcx
zFvMcOejRLstE3k11Vt4oQUfnhsm9smzsILr1jsX8XBl4knVfMhnjFe2jrwBxYrR
mJQKVTf1UMaCUdBGYcnayTQXJNLU9gAjNfVj+0Rjk8LLQ/elR8Gvbik8L4Eeyg1j
vahQSveJbQohMfpknvUH12rh8B4oLbd9dNOthRevderkzxiCESOHES4oEn5LCitP
LWFf0wUGwbfgmP+vc9Mj21FZwTAWTUgary5Y4mETaMcsj9Ki7b3ij5CvRfoOf55c
sBmiJjhAcPASV9e0ZeMhu1USRdt6J9JhpaxgbUVLat2LMEwL3IJ9gQm/0PaFGgrv
x/Sfj68nGwwez/phenn8+8cP8qSKLVbY0HTDcNtb4wK5tayf6D4m3r5kUafTQ64X
ddRTpd3Jw5WN8UiJ3io1go2o9Gr7kNndaatKvEvSvcIFSItGGKLWNmjl11tyMvaL
m0MEuDmdDKBG4nDhqNUSBi8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 704707131171898348007419274939392803116973054712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-15 07:27:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 07:22:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arnhem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Coöperatie VGZ U.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'apollo.ot.vgz.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780047642471894623088923333004996546936694748052135692816612645910165503544532906506285770527381789937285183788202661959798592830855641199826165586004368248563575759814371242358428533539202830256553306105088514959952008931093759850603839679984483662190941817329902605870756067431077283234956579755378223480331234387453318974739720370711022599698930756530941677402194840277415578579606008052223426079998356023407491706751094976626432771337091434532406384323047841381157035589125407496248160878097318865136883781476047590405869155543653166156112554675632765215292677565095550251365711742958398456778876678826005442833490421635708921159380545931759560311129284500001157382819560513948079707413538789333549300085574116830682650247571007639471390087405482532084299946266519451787737625266806171356907363740005561046932612907832371251838259807033821023273281285525577941578032352475927640804223251105667548983261857051096224610942028657392268692065919325202347388688643642974291400320987047487308919496845439880719608640040567155972449597247853426194751498858455825256579452748005576685739114234903693644180546518140732772713577462290966779836428341376537077463434224679328345708322072498063139088822412475432299540722065335788655881618991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ot.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.at.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.pls.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.opl.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.ot.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.at.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.pls.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.opl.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ofmmock.at.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ofmmock.ot.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ofmmock.vgz.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78652f42fe8f300014a9b176b4a8c392f0d00de4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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