mijn.izagezondsamen.nl

- IZA Zorgverzekeraar N.V. -

Issued by QuoVadis CSP - PKI Overheid CA - G2

About this certificate

This digital certificate with serial number 77:f3:e5:b6:c7:d0:ce:a9:07:bf:1a:26:83:48:d7:61:25:01:a5:78 was issued on by QuoVadis Trustlink BV.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IZA Zorgverzekeraar N.V.

Company registration number: 00000003091544270000
Organization: IZA Zorgverzekeraar N.V.
Organization unit: ICT
State / Province: Gelderland
Locality: Arnhem
Country: NL

QuoVadis Trustlink BV

Organization: QuoVadis Trustlink BV
Organization unit: Issuing Certification Authority
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 77:f3:e5:b6:c7:d0:ce:a9:07:bf:1a:26:83:48:d7:61:25:01:a5:78
Serial Number (int): 684808993721749557990528471607010890895247648120
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f8:58:e2:de:44:37:54:29:8d:71:57:c8:41:9c:40:42:22:3f:51:55
AuthorityKeyId: 69:cb:7f:50:76:00:86:53:95:79:12:c1:58:76:1f:13:ef:f2:4d:a3

Fingerprint (sha1): 24:86:7e:64:67:27:81:c9:2a:4e:fe:fb:70:ef:74:85:a0:8d:c9:b1
Fingerprint (sha256): 1a:a2:d8:2b:3c:99:13:c9:16:6d:a6:99:ee:76:98:a4:d7:d6:62:4c:c0:9f:c8:65:71:bf:7e:78:de:ae:6d:e7

Issuing Certificate URL: http://trust.quovadisglobal.com/qvocag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvocag2.crl

Check the revocation status for certificate mijn.izagezondsamen.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mijn.izagezondsamen.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mijn.izagezondsamen.nl

Other certificates including the domain name izagezondsamen.nl

(limited to 100 certificates)
www.izagezondsamen.nl
documenten.izagezondsamen.nl
acc.inloggen.izagezondsamen.nl
inloggen.izagezondsamen.nl
www.izagezondsamen.nl
mijn.izagezondsamen.nl
inloggen.izagezondsamen.nl
e-mail.izagezondsamen.nl
premie.izagezondsamen.nl
acc.inloggen.izagezondsamen.nl
inloggen.izagezondsamen.nl
www.izagezondsamen.nl
documenten.izagezondsamen.nl
www.izagezondsamen.nl
pub.izagezondsamen.nl
pub.izagezondsamen.nl
www.izagezondsamen.nl
mijn.izagezondsamen.nl
e-mail.izagezondsamen.nl
inloggen.izagezondsamen.nl
inloggen.izagezondsamen.nl
documenten.izagezondsamen.nl
inloggen.izagezondsamen.nl
acc.inloggen.izagezondsamen.nl
www.premie.izagezondsamen.nl
pub.izagezondsamen.nl
inloggen.izagezondsamen.nl

Certificate

The complete raw certificate details for mijn.izagezondsamen.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHhTCCBW2gAwIBAgIUd/PltsfQzqkHvxomg0jXYSUBpXgwDQYJKoZIhvcNAQEL
BQAwgYUxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVRdW9WYWRpcyBUcnVzdGxpbmsg
QlYxKDAmBgNVBAsMH0lzc3VpbmcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxLDAq
BgNVBAMMI1F1b1ZhZGlzIENTUCAtIFBLSSBPdmVyaGVpZCBDQSAtIEcyMB4XDTEy
MDgzMDA5NDYyNFoXDTE1MDgzMDA5NDYyNFowgaQxHTAbBgNVBAUTFDAwMDAwMDAz
MDkxNTQ0MjcwMDAwMQswCQYDVQQGEwJOTDETMBEGA1UECBMKR2VsZGVybGFuZDEP
MA0GA1UEBxMGQXJuaGVtMSEwHwYDVQQKExhJWkEgWm9yZ3Zlcnpla2VyYWFyIE4u
Vi4xDDAKBgNVBAsTA0lDVDEfMB0GA1UEAxMWbWlqbi5pemFnZXpvbmRzYW1lbi5u
bDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRbRTPwHkkFRZ/nqgmU
Mpz8QCIJIhY9Akv8u6cQtM2n3O9+gf63vk05SwETnrUunbS7pmdS2SW0wOIrZXpq
y1hiGOFh7KfQkV037x1mDmOgf+VEoCR2GJHxjwWHPFJ/OINTzYpNkNvZgtz/6CYk
UFn9Gic5wSDl076EEtv4lWxHdbCKOtvACOFR/PdlZf0f73jnYY2YImKCdjxY6Zfq
Vh6H8TQ0lVVo9YnzvlukdkSYakjVlfpaFbNxqMMHL7gpg5BXAhmnhfn+adqpSw8I
RjWtgJWwz47hD3S2b7+ylys6ctWbXgv0JMdg1SDasd4qmzKI0a4gwbth/HQYcsNU
sEUCAwEAAaOCAsowggLGMAwGA1UdEwEB/wQCMAAwggExBgNVHSAEggEoMIIBJDCC
ASAGCmCEEAGHawECBQYwggEQMIHXBggrBgEFBQcCAjCByhqBx1JlbGlhbmNlIG9u
IHRoaXMgY2VydGlmaWNhdGUgYnkgYW55IHBhcnR5IGFzc3VtZXMgYWNjZXB0YW5j
ZSBvZiB0aGUgcmVsZXZhbnQgUXVvVmFkaXMgQ2VydGlmaWNhdGlvbiBQcmFjdGlj
ZSBTdGF0ZW1lbnQgYW5kIG90aGVyIGRvY3VtZW50cyBpbiB0aGUgUXVvVmFkaXMg
cmVwb3NpdG9yeSAgKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tKS4wNAYI
KwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRv
cnkwYQYDVR0RBFowWKA+BgorBgEEAYI3FAIDoDAMLjIuMTYuNTI4LjEuMTAwMy4x
LjMuNS4yLjEtMDAwMDAwMDMwOTE1NDQyNzAwMDCCFm1pam4uaXphZ2V6b25kc2Ft
ZW4ubmwwcwYIKwYBBQUHAQEEZzBlMCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5x
dW92YWRpc2dsb2JhbC5jb20wNwYIKwYBBQUHMAKGK2h0dHA6Ly90cnVzdC5xdW92
YWRpc2dsb2JhbC5jb20vcXZvY2FnMi5jcnQwDgYDVR0PAQH/BAQDAgOoMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRpy39QdgCGU5V5
EsFYdh8T7/JNozA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlz
Z2xvYmFsLmNvbS9xdm9jYWcyLmNybDAdBgNVHQ4EFgQU+Fji3kQ3VCmNcVfIQZxA
QiI/UVUwDQYJKoZIhvcNAQELBQADggIBAJDVBDc8XtaphYRjkqlE1Y61uoAmZ3PJ
36atMbOccuBGw7p0AhXfrEOJzWcUgMuyQaFltixGt/x/6eI95EIzY3I89veuDBR1
IOv8J+ZOCAN2YGMCE6KcllVJeWMaWAhDjquWvNUSQhs36jcObrRrqTl2D+PU4V3e
bl5RlCdmN+N5jxH61Fvfb4lPFiLMKsaS9lhluMMjG5FCm8lXPEAbkmSar13FjrO6
v80Q/IzNnhvNSm2vv2pajcIZfJYD6FJ+nRtePQPbIDgKeLqDHazEYMR2WJ4u0Kpd
O+e06XMWTKsK1WxvkKWltRmomfpW83wPrZQ0meZh0K180U6NZWSnlHGq22FedQkL
8UCIMzo6TtYoXGQvH5EoyoWmnCOJLYVk9wc5d/0PV7FCwcGYpf5QgS4/25yTwjnn
RCSQ2xyYqsoNTg2LtAqM5bk1T3LqJeSApMv8To3PlSu10JnvVIZrTEMEHS2ZP9Fb
dJLgfSu8hEJVtVvpiFS+hQCWslzrDTLruFl8MCsNU/L0762G05wHJTVFMputTqht
TIRYknhJd3DrzCNyxUSX4sr3hTSe5UC5fm5n4f51pPIJHHiCfOmqITx2ne1E0bnp
fAmRpN6mdw8/pc+pvoYdvwStpjQRV9o+0bfmyOQoO9hw3wD2dc093WaaMAmKj3Qk
4E2F4ZXp7Mf7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFtFM/AeSQVFn+eqCZQy
nPxAIgkiFj0CS/y7pxC0zafc736B/re+TTlLAROetS6dtLumZ1LZJbTA4itlemrL
WGIY4WHsp9CRXTfvHWYOY6B/5USgJHYYkfGPBYc8Un84g1PNik2Q29mC3P/oJiRQ
Wf0aJznBIOXTvoQS2/iVbEd1sIo628AI4VH892Vl/R/veOdhjZgiYoJ2PFjpl+pW
HofxNDSVVWj1ifO+W6R2RJhqSNWV+loVs3GowwcvuCmDkFcCGaeF+f5p2qlLDwhG
Na2AlbDPjuEPdLZvv7KXKzpy1ZteC/Qkx2DVINqx3iqbMojRriDBu2H8dBhyw1Sw
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 684808993721749557990528471607010890895247648120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Issuing Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis CSP - PKI Overheid CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-30 09:46:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-30 09:46:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003091544270000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arnhem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IZA Zorgverzekeraar N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mijn.izagezondsamen.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20748089088516494227470237055620644310326567245336000031316982477333134916901870403987203414147694519395665289730662992877404763419534722549825961424691009739598732896280092790520141155296440024530666263667357786230164984128779385617998176021254179160127092684422563965746945763040714043967864297765473478791371503468551433750961060704128260226660984858677472624581131195453936866976613322718827743560590559549049790480766704199288709054178660843891130558047681031413046133019762485944063719599700733079366973638100773976285160901708293075726546377957171986029671677366474870257348727479111922066369008564409147371589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (296 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 108 105 97 110 99 101 32 111 110 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 98 121 32 97 110 121 32 112 97 114 116 121 32 97 115 115 117 109 101 115 32 97 99 99 101 112 116 97 110 99 101 32 111 102 32 116 104 101 32 114 101 108 101 118 97 110 116 32 81 117 111 86 97 100 105 115 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 97 110 100 32 111 116 104 101 114 32 100 111 99 117 109 101 110 116 115 32 105 110 32 116 104 101 32 81 117 111 86 97 100 105 115 32 114 101 112 111 115 105 116 111 114 121 32 32 40 104 116 116 112 58 47 47 119 119 119 46 113 117 111 118 97 100 105 115 103 108 111 98 97 108 46 99 111 109 41 46]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.2.1-00000003091544270000'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.izagezondsamen.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvocag2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 69cb7f5076008653957912c158761f13eff24da3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvocag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f858e2de443754298d7157c8419c4042223f5155
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0090d504373c5ed6a985846392a944d58eb5ba80266773c9dfa6ad31b39c72e046c3ba740215dfac4389cd671480cbb241a165b62c46b7fc7fe9e23de4423363723cf6f7ae0c147520ebfc27e64e08037660630213a29c96554979631a5808438eab96bcd512421b37ea370e6eb46ba939760fe3d4e15dde6e5e5194276637e3798f11fad45bdf6f894f1622cc2ac692f65865b8c3231b91429bc9573c401b92649aaf5dc58eb3babfcd10fc8ccd9e1bcd4a6dafbf6a5a8dc2197c9603e8527e9d1b5e3d03db20380a78ba831dacc460c476589e2ed0aa5d3be7b4e973164cab0ad56c6f90a5a5b519a899fa56f37c0fad943499e661d0ad7cd14e8d6564a79471aadb615e75090bf14088333a3a4ed6285c642f1f9128ca85a69c23892d8564f7073977fd0f57b142c1c198a5fe50812e3fdb9c93c239e7442490db1c98aaca0d4e0d8bb40a8ce5b9354f72ea25e480a4cbfc4e8dcf952bb5d099ef54866b4c43041d2d993fd15b7492e07d2bbc844255b55be98854be850096b25ceb0d32ebb8597c302b0d53f2f4efad86d39c07253545329bad4ea86d4c84589278497770ebcc2372c54497e2caf785349ee540b97e6e67e1fe75a4f2091c78827ce9aa213c769ded44d1b9e97c0991a4dea6770f3fa5cfa9be861dbf04ada6341157da3ed1b7e6c8e4283bd870df00f675cd3ddd669a30098a8f7424e04d85e195e9ecc7fb