nirvana-parprimary.sgmarkets.com

- Societe Generale SA -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 61:e4:06:8d:a9:28:e4:60:03:fc:2d:b1:d1:42:cf:7b:4f:db:92:10 was issued on by QuoVadis Limited.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
State / Province: Île-de-France
Locality: Paris
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 61:e4:06:8d:a9:28:e4:60:03:fc:2d:b1:d1:42:cf:7b:4f:db:92:10
Serial Number (int): 558857245553558597499207057690553478978962428432
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 02:a4:18:a1:a5:fa:f8:1f:74:17:67:c6:ed:e9:fd:65:29:34:69:ad
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): f7:39:9a:3c:bb:70:f3:56:cf:21:0b:70:a8:da:d0:96:c2:b5:37:06
Fingerprint (sha256): 1f:98:ad:60:3d:dd:f8:6d:4c:e1:77:46:27:77:24:93:6b:f8:b2:eb:42:25:37:49:33:79:04:e4:29:ce:37:fb

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate nirvana-parprimary.sgmarkets.com

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nirvana-parprimary.sgmarkets.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nirvana-parprimary.sgmarkets.com
nirvana-parsgmficsecondary.sgmarkets.com
parnirvanaprimaryiso.socgen.com
nirvana-parsmesecondary.sgmarkets.com
nirvana-paruatrcprimary.sgmarkets.com
nirvana-parsgmmmprimary.sgmarkets.com
nirvana-parsgmctyprimary.sgmarkets.com
parnirvanasecondaryiso.socgen.com
nirvana-parsmeprimary.sgmarkets.com
nirvana-parsgmfxprimary.sgmarkets.com
nirvana-paruatrcsecondary.sgmarkets.com
parnirvanasecondary.socgen.com
nirvana-parsgmflowsecondary.sgmarkets.com
nirvana-parsgmcrtsecondary.sgmarkets.com
parsmenirvanasecondary.socgen.com
nirvana-parsgmctysecondary.sgmarkets.com
nirvana-parbetasecondary.sgmarkets.com
nirvana-parisoprimary.sgmarkets.com
nirvana-parsecondary.sgmarkets.com
nirvana-parisosecondary.sgmarkets.com
parsmenirvanaprimary.socgen.com
nirvana-parsgmprimary.sgmarkets.com
nirvana-parsgmcrtprimary.sgmarkets.com
nirvana-parsgmspprimary.sgmarkets.com
nirvana-parsgmfxsecondary.sgmarkets.com
nirvana-parsgmsecondary.sgmarkets.com
nirvana-parsgmspsecondary.sgmarkets.com
nirvana-parsgmflowprimary.sgmarkets.com
parnirvanaprimary.socgen.com
nirvana-parsgmmmsecondary.sgmarkets.com
nirvana-parsgmficprimary.sgmarkets.com
nirvana-parbetaprimary.sgmarkets.com

Other certificates including the domain name sgmarkets.com

(limited to 100 certificates)
rfp.sgmarkets.com
youtrack-api.sgmarkets.com
fic-uatrc.sgmarkets.com
shared.sgmarkets.com
nirvana-nycprimary.sgmarkets.com
*.sgmarkets.com
riskworkflows.sgmarkets.com
volhub.sgmarkets.com
shared.sgmarkets.com
ic.sgmarkets.com
sp-docapi.sgmarkets.com
sgmarkets.com
custody.sgmarkets.com
sgmarkets.com
Stratlab.sgmarkets.com
cty.sgmarkets.com
myhedge-staging.sgmarkets.com
crossborder-uat.sgmarkets.com
eqdflow-uat.sgmarkets.com
lab.sgmarkets.com
gbds-uat.sgmarkets.com
nirvana-hkprimary.sgmarkets.com
1dfinancing.sgmarkets.com
tradematch-api.sgmarkets.com
Mybilling-h.sgmarkets.com
valuation.sgmarkets.com
myoprisk-h.sgmarkets.com
ushronboard-dev.sgmarkets.com
www.warrants.com
api-z-dev.sgmarkets.com
dt.sgmarkets.com
cty.sgmarkets.com
SSO.sgmarkets.com
riskworkflows.sgmarkets.com
riskworkflows-beta.sgmarkets.com
sso-cert.sgmarkets.com
emars.sgmarkets.com
www.societegenerale.fi
techweek.sgmarkets.com
eqd-uatrc.sgmarkets.com
design.sgmarkets.com
myoprisk.sgmarkets.com
myhedge.sgmarkets.com
riskworkflows-beta.sgmarkets.com
sp-preview.sgmarkets.com
t.sgmarkets.com
billing-v2-h.sgmarkets.com
ic.sgmarkets.com
fic-devint.sgmarkets.com
lisa-preview.sgmarkets.com
sso-uat.sgmarkets.com
cty.sgmarkets.com
kyc.sgmarkets.com
selfcare-hom.sgmarkets.com
finestrat.sgmarkets.com
sgmarkets.com
cty.sgmarkets.com
www.warrants.com
t-monitoring-web-shared.sgmarkets.com
dview.sgmarkets.com
cprofit-datacollect.sgmarkets.com
listedstructuredproducts.com
ic.sgmarkets.com
riskworkflows.sgmarkets.com
Stratlab.sgmarkets.com
crossassetfinancing.sgmarkets.com
cty.sgmarkets.com
cprofit-correction-uat.sgmarkets.com
securitiesservices-api.sgmarkets.com
analytics.sgmarkets.com
analytics.sgmarkets.com
static.sgmarkets.com
advisoryfinancing.sgmarkets.com
listedstructuredproducts.com
www.warrants.com
securitieslending.sgmarkets.com
t-apigateway-kong-test.sgmarkets.com
confirmation.sgmarkets.com
t-helpcenter-widget.sgmarkets.com
smartcash-uat.sgmarkets.com
www.warrants.com
tradematch-api.sgmarkets.com
nirvana-parprimary.sgmarkets.com
api-z.sgmarkets.com
developer.sgmarkets.com
api-z-dev.sgmarkets.com
emars.sgmarkets.com
1dfinancing-api.sgmarkets.com
stratlab.sgmarkets.com
sso.sgmarkets.com
creditportfolio-demo.sgmarkets.com
test.sgmarkets.com
Api.sgmarkets.com
advisoryfinancing.sgmarkets.com
www.warrants.com
analytics-webwizard.sgmarkets.com
sso-cert.sgmarkets.com
valuation.sgmarkets.com
www.warrants.com
valuation.sgmarkets.com

Certificate

The complete raw certificate details for nirvana-parprimary.sgmarkets.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cLDaSwayoCtzY9IuRgS
IWF5vwxURHyU80qXUSg8IcXKpT2eWqKCxgEDiQm+vzmA/zJfF7R421bgdXJZNUE6
nVRzoxjrWhsnsNS0bQ04m7ByZ9rxFhs4BjMu16NCZN1Po6oTBjL74DszKFhvledY
hFz82sYxzPCRNQArF0Rv+Lsw9sNlf2vh2efv2txFgDEpOGHf8ZFMrazF8yklFzH1
isfzBySWZZhJqDuzSlz++4LXpQ9M8eVkS8jj2acw12tzuFe2phdLmNR9RF+GA4lq
u06SUXcXWKAEugr4jxJ7Ide63SkRF0lf7BQ72eCkszzTyTgcVtS0M+DQcysZBU4n
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 558857245553558597499207057690553478978962428432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 09:14:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-21 09:24:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nirvana-parprimary.sgmarkets.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26984800332124868799403057376689649073259985997058006478659299475348326608544981521869572533319892044499592886783009297417405324631516386404656194141308020380890241769239941933709062806158692370053887085537665896165770137208155382184749855986981487166946073273574775895886220499960136080062374562678995866966543074248932895008128767608817103883959251427092177588027408609514227179530810809997008966738550204087494305125158183891401900049261654339332740172703026041298230239917305682584123558912631663367353371891208980870994091793460270420119406995326423180592937539519896275353472012297483059610386028059330922555221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1228 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmficsecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parnirvanaprimaryiso.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsmesecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-paruatrcprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmmmprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmctyprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parnirvanasecondaryiso.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsmeprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmfxprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-paruatrcsecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parnirvanasecondary.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmflowsecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmcrtsecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsmenirvanasecondary.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmctysecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parbetasecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parisoprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parisosecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsmenirvanaprimary.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmcrtprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmspprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmfxsecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmsecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmspsecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmflowprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parnirvanaprimary.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmmmsecondary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parsgmficprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana-parbetaprimary.sgmarkets.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02a418a1a5faf81f741767c6ede9fd65293469ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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