bsp-manager.psn.dwp.gsi.gov.uk
- The Department for Work and Pensions -
Issued by QuoVadis EV SSL ICA G3
About this certificate
This digital certificate with serial number 51:d1:7b:3b:31:84:f4:14:6e:89:ed:77:12:2c:e3:f6:e6:dc:5f:0a was issued on by QuoVadis Limited.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
The Department for Work and Pensions
Company registration number:
Government Entity
Organization: The Department for Work and Pensions
Organization: The Department for Work and Pensions
State / Province:
London
Locality: London
Country: GB
Locality: London
Country: GB
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate has expire since
Certificate Details
Serial Number (hex): 51:d1:7b:3b:31:84:f4:14:6e:89:ed:77:12:2c:e3:f6:e6:dc:5f:0aSerial Number (int): 467099843136875662050676609926447167079158931210
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 01:d8:19:bb:b0:01:3c:bc:f3:89:b5:04:e4:84:ca:78:58:f4:b4:b5
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f
Fingerprint (sha1): 56:24:e6:a7:59:7b:42:22:d5:3f:6f:fa:43:52:ea:89:2c:14:7b:42
Fingerprint (sha256): 21:43:5f:61:4b:3d:0c:5d:2b:d9:9f:b0:77:55:cd:55:15:e5:68:1c:fe:32:13:cc:ba:54:69:6b:92:a6:68:00
Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt
Revocation information
OCSP Server: http://ev.ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl
Check the revocation status for certificate bsp-manager.psn.dwp.gsi.gov.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bsp-manager.psn.dwp.gsi.gov.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bsp-manager.psn.dwp.gsi.gov.uk
Other certificates including the domain name gsi.gov.uk
(limited to 100 certificates)
*.fcos.gsi.gov.uk
mis.gateway.gsi.gov.uk
hmtreasury.gsi.gov.uk
www.ims.homeoffice.gsi.gov.uk
sip.dwp.gsi.gov.uk
noms-sip-support.noms.gsi.gov.uk
selfserve.scc.gsi.gov.uk
dr.noms.gsi.gov.uk
eucaristest.dvla.gsi.gov.uk
www.nsv.gsi.gov.uk
im.noms.gsi.gov.uk
mail.mhra.gov.uk
tellusonce.gsi.gov.uk
spg400.noms.gsi.gov.uk
cis.dwp.gsi.gov.uk
alfresco.noms.gsi.gov.uk
sts.cma.gov.uk
dfidexchange.dfid.gov.uk
hmtreasury.gsi.gov.uk
spg500.noms.gsi.gov.uk
dvla.gsi.gov.uk
STS.MHRA.GOV.UK
*.homeoffice.gsi.gov.uk
noms.gsi.gov.uk
portal.nca.gsi.gov.uk
noms.gsi.gov.uk
app.college.gsi.gov.uk
spg510.noms.gsi.gov.uk
sapphire.gsi.gov.uk
secure.sentinel.scc.com
portal-60.fcfg.gsi.gov.uk
spg510.noms.gsi.gov.uk
spire.trade.gsi.gov.uk
myaccount.gateway.gsi.gov.uk
analytic.noms.gsi.gov.uk
live.oscar.gsi.gov.uk
extranet.ipcc.gsi.gov.uk
*.ppud.gsi.gov.uk
t2.oscar.gsi.gov.uk
sts.mhra.gov.uk
pdlsc.pss.psn.dwp.gsi.gov.uk
decc.gsi.gov.uk
DHDISCOVERER.DH.GSI.GOV.UK
spire.trade.gsi.gov.uk
sco.ecase.gsi.gov.uk
STS.MHRA.GOV.UK
im.noms.gsi.gov.uk
vcmspp.noms.gsi.gov.uk
sip.dwp.gsi.gov.uk
*.mhra.gov.uk
docs.skyscapecloud.gsi.gov.uk
mail.mhra.gov.uk
zerto.z00010-ee1.r00007.frn.skyscapecloud.gsi.gov.uk
mail.mhra.gov.uk
sip.nationalpolice.FCOS.GSI.GOV.UK
analytic.noms.gsi.gov.uk
cag.vosa.gsi.gov.uk
sso-60.fcfg.gsi.gov.uk
*.ebanalytics.co.uk
mailshe.education.gov.uk
ccm.ukba.gsi.gov.uk
Mail.policeconduct.gov.uk
bsp-manager.psn.dwp.gsi.gov.uk
yjbservicespp.yjb.gsi.gov.uk
ext.mobile.fco.gsi.gov.uk
casa.psn.dwp.gsi.gov.uk
service.ucd.gsi.gov.uk
sharedservicesarvato.gsi.gov.uk
libra.courtstore.justice.gsi.gov.uk
sts.staging.mhra.gov.uk
sip.nationalpolice.FCOS.GSI.GOV.UK
www.ims.homeoffice.gsi.gov.uk
zerto.z0000d.r00005.cor.portal.skyscapecloud.gsi.gov.uk
vcmspp.noms.gsi.gov.uk
cag.vosa.gsi.gov.uk
Mail.policeconduct.gov.uk
ccm.ukba.gsi.gov.uk
mail.mhra.gov.uk
myaccount.gateway.gsi.gov.uk
bsp-manager.psn.dwp.gsi.gov.uk
preprod-intranet.hmpps.gsi.gov.uk
tfclookup.psn.dwp.gsi.gov.uk
estate.fco.gov.uk
poise.homeoffice.gsi.gov.uk
analytics.hmpps.gsi.gov.uk
im.noms.gsi.gov.uk
zerto.z00010-ef1.r00007.frn.skyscapecloud.gsi.gov.uk
FDEREPORTS.dsa.gsi.gov.uk
spg500.noms.gsi.gov.uk
courtstore.justice.gsi.gov.uk
pam.gsi.gov.uk
mta-sts.adjudicatorsoffice.gsi.gov.uk
jbes.pss.psn.dwp.gsi.gov.uk
zerto.z00012.r00006.frn.portal.skyscapecloud.gsi.gov.uk
vcms.noms.gsi.gov.uk
spg.noms.gsi.gov.uk
sapphire.gsi.gov.uk
Sip.hca.gsi.gov.uk
portal1.dft.gsi.gov.uk
mis.gateway.gsi.gov.uk
hmtreasury.gsi.gov.uk
www.ims.homeoffice.gsi.gov.uk
sip.dwp.gsi.gov.uk
noms-sip-support.noms.gsi.gov.uk
selfserve.scc.gsi.gov.uk
dr.noms.gsi.gov.uk
eucaristest.dvla.gsi.gov.uk
www.nsv.gsi.gov.uk
im.noms.gsi.gov.uk
mail.mhra.gov.uk
tellusonce.gsi.gov.uk
spg400.noms.gsi.gov.uk
cis.dwp.gsi.gov.uk
alfresco.noms.gsi.gov.uk
sts.cma.gov.uk
dfidexchange.dfid.gov.uk
hmtreasury.gsi.gov.uk
spg500.noms.gsi.gov.uk
dvla.gsi.gov.uk
STS.MHRA.GOV.UK
*.homeoffice.gsi.gov.uk
noms.gsi.gov.uk
portal.nca.gsi.gov.uk
noms.gsi.gov.uk
app.college.gsi.gov.uk
spg510.noms.gsi.gov.uk
sapphire.gsi.gov.uk
secure.sentinel.scc.com
portal-60.fcfg.gsi.gov.uk
spg510.noms.gsi.gov.uk
spire.trade.gsi.gov.uk
myaccount.gateway.gsi.gov.uk
analytic.noms.gsi.gov.uk
live.oscar.gsi.gov.uk
extranet.ipcc.gsi.gov.uk
*.ppud.gsi.gov.uk
t2.oscar.gsi.gov.uk
sts.mhra.gov.uk
pdlsc.pss.psn.dwp.gsi.gov.uk
decc.gsi.gov.uk
DHDISCOVERER.DH.GSI.GOV.UK
spire.trade.gsi.gov.uk
sco.ecase.gsi.gov.uk
STS.MHRA.GOV.UK
im.noms.gsi.gov.uk
vcmspp.noms.gsi.gov.uk
sip.dwp.gsi.gov.uk
*.mhra.gov.uk
docs.skyscapecloud.gsi.gov.uk
mail.mhra.gov.uk
zerto.z00010-ee1.r00007.frn.skyscapecloud.gsi.gov.uk
mail.mhra.gov.uk
sip.nationalpolice.FCOS.GSI.GOV.UK
analytic.noms.gsi.gov.uk
cag.vosa.gsi.gov.uk
sso-60.fcfg.gsi.gov.uk
*.ebanalytics.co.uk
mailshe.education.gov.uk
ccm.ukba.gsi.gov.uk
Mail.policeconduct.gov.uk
bsp-manager.psn.dwp.gsi.gov.uk
yjbservicespp.yjb.gsi.gov.uk
ext.mobile.fco.gsi.gov.uk
casa.psn.dwp.gsi.gov.uk
service.ucd.gsi.gov.uk
sharedservicesarvato.gsi.gov.uk
libra.courtstore.justice.gsi.gov.uk
sts.staging.mhra.gov.uk
sip.nationalpolice.FCOS.GSI.GOV.UK
www.ims.homeoffice.gsi.gov.uk
zerto.z0000d.r00005.cor.portal.skyscapecloud.gsi.gov.uk
vcmspp.noms.gsi.gov.uk
cag.vosa.gsi.gov.uk
Mail.policeconduct.gov.uk
ccm.ukba.gsi.gov.uk
mail.mhra.gov.uk
myaccount.gateway.gsi.gov.uk
bsp-manager.psn.dwp.gsi.gov.uk
preprod-intranet.hmpps.gsi.gov.uk
tfclookup.psn.dwp.gsi.gov.uk
estate.fco.gov.uk
poise.homeoffice.gsi.gov.uk
analytics.hmpps.gsi.gov.uk
im.noms.gsi.gov.uk
zerto.z00010-ef1.r00007.frn.skyscapecloud.gsi.gov.uk
FDEREPORTS.dsa.gsi.gov.uk
spg500.noms.gsi.gov.uk
courtstore.justice.gsi.gov.uk
pam.gsi.gov.uk
mta-sts.adjudicatorsoffice.gsi.gov.uk
jbes.pss.psn.dwp.gsi.gov.uk
zerto.z00012.r00006.frn.portal.skyscapecloud.gsi.gov.uk
vcms.noms.gsi.gov.uk
spg.noms.gsi.gov.uk
sapphire.gsi.gov.uk
Sip.hca.gsi.gov.uk
portal1.dft.gsi.gov.uk
Certificate
The complete raw certificate details for bsp-manager.psn.dwp.gsi.gov.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGgzCCBGugAwIBAgIUUdF7OzGE9BRuie13Eizj9ubcXwowDQYJKoZIhvcNAQEL BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMjAwMzI2MTAxMjQ4WhcN MjEwMzI2MTAyMjAwWjCB1DETMBEGCysGAQQBgjc8AgEDEwJHQjEaMBgGA1UEDwwR R292ZXJubWVudCBFbnRpdHkxGjAYBgNVBAUTEUdvdmVybm1lbnQgRW50aXR5MQsw CQYDVQQGEwJHQjEPMA0GA1UECAwGTG9uZG9uMQ8wDQYDVQQHDAZMb25kb24xLTAr BgNVBAoMJFRoZSBEZXBhcnRtZW50IGZvciBXb3JrIGFuZCBQZW5zaW9uczEnMCUG A1UEAwweYnNwLW1hbmFnZXIucHNuLmR3cC5nc2kuZ292LnVrMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLq+0ngcM7w/lAvnW36yM3MVujFIzyylzuaq JAnUXrnOiUvUz4IVLddkqWIk8lJ+/GZFnAwwOUvsMBYK0CZt77W3TZXZSucQibZv rVX1X77NJabAgeOcoBvp3IzPOKysrWFXje7pGK6HxsXk0NNLiA1z2kU9Xd43b8FO KQyfg/RvPDiT+8WF+yij6/wS6Cx3O4rdnAwivvXuaIPDEoDMuitCmsmHLITmtO6n 5jUq7sx2aopo52Xay2Bzb02o/nE3eNxGxQIRo3DWDgB15jaAPGUNBoimtmxtfOMZ ScUmpKNrEEQWKQrvu71GNPZRIpERQ0ovFl8rDPfOaw8SDUa5EQIDAQABo4IB1TCC AdEwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBTlhFTQkEmfOLryyeEqCMVOn6BI PzB4BggrBgEFBQcBAQRsMGowOQYIKwYBBQUHMAKGLWh0dHA6Ly90cnVzdC5xdW92 YWRpc2dsb2JhbC5jb20vcXZldnNzbGczLmNydDAtBggrBgEFBQcwAYYhaHR0cDov L2V2Lm9jc3AucXVvdmFkaXNnbG9iYWwuY29tMCkGA1UdEQQiMCCCHmJzcC1tYW5h Z2VyLnBzbi5kd3AuZ3NpLmdvdi51azBaBgNVHSAEUzBRMEYGDCsGAQQBvlgAAmQB AjA2MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbS9y ZXBvc2l0b3J5MAcGBWeBDAEBMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcD ATA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNv bS9xdmV2c3NsZzMuY3JsMB0GA1UdDgQWBBQB2Bm7sAE8vPOJtQTkhMp4WPS0tTAO BgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggIBADHy4g4RyG8tReBxBbtOf8GoU3F6M3aRHP1rPK6EWTVf8QwA0HKEJpRM /ZpPfBcv1X2+Wo2ZZwIzTk+lGuR6l9asO/1xHodenkmqS2R4E5/mFPqYE6jdjnnh ZqIkzs7MADBp3zVYV7U6NPpk5+pOq5SbQfTAjXw7VOUYtorMHppthJKkqNDTRHSV nWy9v8JBBOAAOrqteEdvA6GTyCXJWlkUpAHI2knPk4FxruXFnQPlW2xNPdkIwkd9 mITc2eVuFeucu+c6Z/gutNoMtza5+512aYBTGMkSEQpYZ2gfDjLSNyamilPn9BGU N87ICCK1YYJMP0nGjlD/HcSHDVXUVenqlKpg3JQSliiZsVMZFAEtH04EslhVMG/Q W4Hp2xKiAmH+MvbMMgakrYmRMXcHHvOSHWj2OR6Hl9/uz0gHrSb3nGqRJLhbZl5O DmAafSPd3LD091VTIrYeK2YbL7NDruSFsBUJYOyOVGAAMkXwOwV+DQA+3297FX7F K3MpcaAapIJHhKYy0+3ZUJRXB7LjZnuaD4+zksI+SYUCroWuV+csV/7c5nRlkruT 4G/5CMhiZKKkeA/l5twpGW+2VbzdqXWLa5CVkfoh62avdreMRLuQOQyREOVtWWKl qNDKNhlNokUDGLnZKOaY6d9S3FcTchh2m3nZrxxgVlLQTbuzD+2P -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLq+0ngcM7w/lAvnW36y M3MVujFIzyylzuaqJAnUXrnOiUvUz4IVLddkqWIk8lJ+/GZFnAwwOUvsMBYK0CZt 77W3TZXZSucQibZvrVX1X77NJabAgeOcoBvp3IzPOKysrWFXje7pGK6HxsXk0NNL iA1z2kU9Xd43b8FOKQyfg/RvPDiT+8WF+yij6/wS6Cx3O4rdnAwivvXuaIPDEoDM uitCmsmHLITmtO6n5jUq7sx2aopo52Xay2Bzb02o/nE3eNxGxQIRo3DWDgB15jaA PGUNBoimtmxtfOMZScUmpKNrEEQWKQrvu71GNPZRIpERQ0ovFl8rDPfOaw8SDUa5 EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 467099843136875662050676609926447167079158931210 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 10:12:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-26 10:22:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Department for Work and Pensions' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bsp-manager.psn.dwp.gsi.gov.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22310029262427019187487602914731220338287580905220452559974419535162923788778623827569870769631190672537164679654762143812631630295455884364607225196426312858949323419594684092167724694076347020051621847500599874038231761433417962884205458257231003606111506068586433455923758202701141897462692766307131100487909689689650615322909221948080242827798903838018247191681897799736349832968535367332868629814627961470525266142840418824435684532844948507311242779641398129436124736390359535818213666865202703429324583424119318547364337547616138393023336778990825879272238593789328300499035085077987581646369951207531812927761 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsp-manager.psn.dwp.gsi.gov.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 01d819bbb0013cbcf389b504e484ca7858f4b4b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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