fs.vgz.nl

- VGZ Zorgverzekeraar N.V. -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 15:8f:bd:29:b4:ec:69:e5:53:58:1a:dc:86:8b:0d:6f:15:45:3d:a2 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VGZ Zorgverzekeraar N.V.

Organization: VGZ Zorgverzekeraar N.V.
Organization unit: ICT
State / Province: Gelderland
Locality: Arnhem
Country: NL

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 15:8f:bd:29:b4:ec:69:e5:53:58:1a:dc:86:8b:0d:6f:15:45:3d:a2
Serial Number (int): 123094291164797224685179286833862318186255695266
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 46:9e:b6:c0:ea:2b:13:92:12:ea:a7:4b:ad:2f:27:16:53:a9:6c:f9
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): f1:b3:9e:e3:d0:02:86:29:0f:d9:45:2f:e4:df:ae:b8:5c:ea:6e:1c
Fingerprint (sha256): 1c:63:ba:69:1e:07:c1:8e:2b:ab:9b:44:70:9a:2f:47:49:df:5d:d4:ff:5b:80:34:3e:0c:ee:ee:4e:53:2e:5f

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate fs.vgz.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fs.vgz.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fs.vgz.nl

Other certificates including the domain name vgz.nl

(limited to 100 certificates)
feedback.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl

Certificate

The complete raw certificate details for fs.vgz.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUFY+9KbTsaeVTWBrchosNbxVFPaIwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTE4MDcyNTEyNTUx
MFoXDTE5MDcyNTEzMDQwMFoweDELMAkGA1UEBhMCTkwxEzARBgNVBAgMCkdlbGRl
cmxhbmQxDzANBgNVBAcMBkFybmhlbTEhMB8GA1UECgwYVkdaIFpvcmd2ZXJ6ZWtl
cmFhciBOLlYuMQwwCgYDVQQLDANJQ1QxEjAQBgNVBAMMCWZzLnZnei5ubDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMpFphNgTg4KIK9tGtLIfJnFi7/z
saAMRQaFNyNk6YGoyUYxt/B2YxvGQKo0kNbnk/VkWlKzDUb0WKDPSxOR6N/bk8gy
bVpEJV/veBB7Ax2hY0R27Nnx9ZxMKHlF5HKzrnIkaQ+yJXX78oFHq/EhpEY9g6lO
1lTgngXj2EtK8WqI1aRe5vbAnp6jGc1W3ZS/pTsRcpNfeOV9rk6d0MpxOh6w1qZ+
gZp5VDSFw93+WiebWKlgaGDSMrP0P5S2wIynu8LXY0i+4O7JAUCVo5R+ivBC6GLn
OSmJylZ08LUKIVDtaJ90H9e0uhFk4+us5tn5fcAnkyXG1Psq2d5NDKrjdksCAwEA
AaOCA5IwggOOMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUkRlirVsXpzD78N45JbG9
jLm4UScwcwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3Qu
cXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzIuY3J0MCoGCCsGAQUFBzABhh5odHRw
Oi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wFAYDVR0RBA0wC4IJZnMudmd6Lm5s
MFEGA1UdIARKMEgwRgYMKwYBBAG+WAACZAEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6
Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwHQYDVR0lBBYwFAYI
KwYBBQUHAwIGCCsGAQUFBwMBMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwu
cXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzIuY3JsMB0GA1UdDgQWBBRGnrbA6isT
khLqp0utLycWU6ls+TAOBgNVHQ8BAf8EBAMCBaAwggH2BgorBgEEAdZ5AgQCBIIB
5gSCAeIB4AB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABZNGK
OhcAAAQDAEcwRQIgI2+GbCCnSgDOTYYDgtfeBcGSNNVtOXKFP//vr8wwBlcCIQDc
mRktXWr8WPw592MfL1NZmpgp/5hOiXn7qX3YKclobwB3ALvZ37wfinG1k5Qjl6qS
e0c4V5UKq1LoGpCWZDaOHtGFAAABZNGKOewAAAQDAEgwRgIhALX12LVkZzUKq11/
nTycYJABGtc44jLnyNSVcAW/sihDAiEAytjeEhaVx5Yh7mbMAW4mkwXtsbUc2KWx
Rjp2HJx3mnYAdgBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAWTR
ijt0AAAEAwBHMEUCIQDk1eDxvJXAy8wuJv9dFF31NSr9xPyPekauIobp+On42wIg
BpAEiGD8tA3MaSygMa06o1Uk0yvmYOn+sX4JH6QvtwkAdQBvU3asMfAxGdiZAKRR
Ff93FRwR2QLBACkGjbIImjfZEwAAAWTRijwQAAAEAwBGMEQCIFa23OVFWQDP66Ef
u7kbMtvpu1suX7wpmjHF5oI1pvPHAiBy+uw0JmS2nWV8yLDjO/iEOM12WQZRFBzM
FAqMk678+DANBgkqhkiG9w0BAQsFAAOCAQEAGDuwhe+4YGM0rDG34j15xUl/tmkr
cnJXP6ojqazGIK0+ZEYEoJ/u2hHPCMBOlNuoycGMstsSWeQhODrb5j80TttqmFG/
POaaeEQNFMBBWeg3DlGO7xNbLN2T9eAfuOcyMG4oUjexVMvYi1gtSAQBTYUphJ1E
4e76uaHa33y1nqmWfR06OXyJv0P+iFnnuj+UWvGrxzzuiKALPp0rJRnY/JED0tSA
hoQ8M+jYgU76VANt/XCc1WELg1YqZ6Krxnt22yY/9fmn0bYT4UT9tMEEHgLki0Wm
RZkffdVuDztKVhII8tXbcElaRbguAaYSim8fg8TiGLU7sjbc43/jskj3Dg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykWmE2BODgogr20a0sh8
mcWLv/OxoAxFBoU3I2TpgajJRjG38HZjG8ZAqjSQ1ueT9WRaUrMNRvRYoM9LE5Ho
39uTyDJtWkQlX+94EHsDHaFjRHbs2fH1nEwoeUXkcrOuciRpD7IldfvygUer8SGk
Rj2DqU7WVOCeBePYS0rxaojVpF7m9sCenqMZzVbdlL+lOxFyk1945X2uTp3QynE6
HrDWpn6BmnlUNIXD3f5aJ5tYqWBoYNIys/Q/lLbAjKe7wtdjSL7g7skBQJWjlH6K
8ELoYuc5KYnKVnTwtQohUO1on3Qf17S6EWTj66zm2fl9wCeTJcbU+yrZ3k0MquN2
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123094291164797224685179286833862318186255695266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-25 12:55:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 13:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arnhem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VGZ Zorgverzekeraar N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fs.vgz.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25534482673521965614769708085480547788786670873294763658348754936035002624025849537261485049431607679871915842865545343379090078126275431848122706800327439034219503686800643931986987797486443513490286044712971728406595533314512271676618597071541506247155135953366004117008179821880163279480949893442909558803048298489223707646607616655818875738525187874571973641453752871878284595924383119834552991277572929707904353643910074488540043241535290190619541168490427220170432012101542678418789683904328303554209132203640219121907793874235565829457860549482889216652696744434848240508621223339467500928794457094050797549131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.vgz.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							469eb6c0ea2b139212eaa74bad2f271653a96cf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00183bb085efb8606334ac31b7e23d79c5497fb6692b7272573faa23a9acc620ad3e644604a09feeda11cf08c04e94dba8c9c18cb2db1259e421383adbe63f344edb6a9851bf3ce69a78440d14c04159e8370e518eef135b2cdd93f5e01fb8e732306e285237b154cbd88b582d4804014d8529849d44e1eefab9a1dadf7cb59ea9967d1d3a397c89bf43fe8859e7ba3f945af1abc73cee88a00b3e9d2b2519d8fc9103d2d48086843c33e8d8814efa54036dfd709cd5610b83562a67a2abc67b76db263ff5f9a7d1b613e144fdb4c1041e02e48b45a645991f7dd56e0f3b4a561208f2d5db70495a45b82e01a6128a6f1f83c4e218b53bb236dce37fe3b248f70e