clikq-telecom.oxxio.nl

Issued by Trust Provider B.V. TLS RSA CA G1

About this certificate

This digital certificate with serial number 07:7d:34:a0:b2:c8:fa:2f:59:b1:77:34:cc:a4:99:3a was issued on by Trust Provider B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clikq-telecom.oxxio.nl

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 07:7d:34:a0:b2:c8:fa:2f:59:b1:77:34:cc:a4:99:3a
Serial Number (int): 9954700494947955110252136639727180090
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 47:8d:b5:dd:d9:b6:b9:38:00:25:fd:05:bc:37:4d:37:ce:2b:39:aa
AuthorityKeyId: f5:56:22:1f:d9:bf:6b:59:24:52:b0:e1:6a:cd:c0:e1:57:67:e9:e8

Fingerprint (sha1): 36:e9:9f:4e:fc:3e:a8:bb:aa:6d:0a:20:4c:64:1b:97:8b:37:9c:4b
Fingerprint (sha256): 25:71:8d:37:43:c5:9c:99:92:41:4f:4f:01:91:ef:64:a5:72:d2:fc:55:c8:7a:14:47:38:95:84:e9:c5:b4:17

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt

Revocation information

OCSP Server: http://statusd.digitalcertvalidation.com
CRL Distribution Point: http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl

Check the revocation status for certificate clikq-telecom.oxxio.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clikq-telecom.oxxio.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clikq-telecom.oxxio.nl

Other certificates including the domain name oxxio.nl

(limited to 100 certificates)
mijn.oxxio.nl
inloggen.test.oxxio.nl
uc16.janrainengage.com
email.oxxio.nl
oxxiowebsite.acc.oxxio.nl
telecombinatie-telecom.acc.oxxio.nl
ac.oxxio.nl
uc16.janrainengage.com
uc16.janrainengage.com
mijn.oxxio.nl
school-dev.handtoy.com
mijn.oxxio.nl
mobiel.oxxio.nl
services.oxxio.nl
uc16.janrainengage.com
uc16.janrainengage.com
oxxiowebsite.acc.oxxio.nl
zakelijk.oxxio.nl
onderzoek.oxxio.nl
uc16.janrainengage.com
mobiel.oxxio.nl
inloggen.oxxio.nl
uc16.janrainengage.com
clikq-telecom.oxxio.nl
mijn.oxxio.nl
www.oxxio.nl
telecombinatie.acc.oxxio.nl
mobiel.oxxio.nl
acc.mobiel.oxxio.nl
uc16.janrainengage.com
mijn.oxxio.nl
mobiel.oxxio.nl
m.oxxio.nl
webmail.eneco.nl
uc16.janrainengage.com
timers.maxwilson.co.uk
staging.oxxio.nl
www.oxxio.nl
www.schoolswillrockyou.co.uk
edigas.oxxio.nl
webmail.eneco.nl
uc16.janrainengage.com
acc.mobiel.oxxio.nl
timers.maxwilson.co.uk
uc16.janrainengage.com
app.oxxio.nl
e.oxxio.nl
mijnacc.oxxio.nl
access.eneco.com
www.oxxio.nl
inbound-telecom.oxxio.nl
uc16.janrainengage.com
em.oxxio.nl
web.oxxio.nl
inbound-telecom.oxxio.nl
mijn2.oxxio.nl
uc16.janrainengage.com
acties.oxxio.nl
acties.oxxio.nl
energiebespaarshop.oxxio.nl
www.oxxio.nl
www.oxxio.nl
www.oxxio.nl
www.oxxio.nl
webmail.eneco.com
beheer.oxxio.nl
www.oxxio.nl
www.oxxio.nl
mijn.oxxio.nl
access.eneco.com
mijn2.oxxio.nl
mijnacc.oxxio.nl
telecombinatie.oxxio.nl
energiebespaarshop.oxxio.nl
over.oxxio.nl
zakelijk.oxxio.nl
mijn.oxxio.nl
uc16.janrainengage.com
*.oxxio.nl
www.oxxio.nl
mijn2.oxxio.nl
www.schengensimple.com
uc16.janrainengage.com
mobiel.oxxio.nl
www.oxxio.nl
webmail.eneco.nl
beheer.oxxio.nl
email2.oxxio.nl
e.oxxio.nl
energiebespaarshop.oxxio.nl
mijnacc.oxxio.nl
uc16.janrainengage.com
email2.oxxio.nl
webwerken.oxxio.nl
acc.mobiel.oxxio.nl
acc.services.oxxio.nl
uc16.janrainengage.com
services.oxxio.nl
telecombinatie.oxxio.nl
mijn.oxxio.nl

Certificate

The complete raw certificate details for clikq-telecom.oxxio.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGhzCCBW+gAwIBAgIQB300oLLI+i9ZsXc0zKSZOjANBgkqhkiG9w0BAQsFADB2
MQswCQYDVQQGEwJOTDEcMBoGA1UEChMTVHJ1c3QgUHJvdmlkZXIgQi5WLjEdMBsG
A1UECxMURG9tYWluIFZhbGlkYXRlZCBTU0wxKjAoBgNVBAMTIVRydXN0IFByb3Zp
ZGVyIEIuVi4gVExTIFJTQSBDQSBHMTAeFw0yMDAxMTAwMDAwMDBaFw0yMjAxMDkx
MjAwMDBaMCExHzAdBgNVBAMTFmNsaWtxLXRlbGVjb20ub3h4aW8ubmwwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDplVwfOAdfsyXJOO+VKyTMNxM9XOp4
cT1xkEo4rQEKMcXrM+vC4S9vk527xJan5ru+xsONAFBK0CaDPI4+0cmj/FdQ73Il
DslUgvJ9/w6Ef+A0fdaxT+b4kfbCkhevQYepJO0X0LA9yofqeH+qFINQuoIKEcUZ
9ex83AJg2cPwMRdhqB30Z3xFFC+T3y6vN/uf2hwbT6FEZ0VMdVMdR/4fgf0GAaWX
LYmSteEzB8PS2RIZxDrM1ZbKASSfstBzg4tJgiUlV48S0M2dj7WV7VyKLWoRJZ1C
otWsQB5n7T1Ub2l6sumQt9odLXNRTKwciV10Y72X9kmnN5y9S1xVoj4PAgMBAAGj
ggNkMIIDYDAfBgNVHSMEGDAWgBT1ViIf2b9rWSRSsOFqzcDhV2fp6DAdBgNVHQ4E
FgQUR4213dm2uTgAJf0FvDdNN84rOaowIQYDVR0RBBowGIIWY2xpa3EtdGVsZWNv
bS5veHhpby5ubDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jZHBkLmRpZ2l0YWxj
ZXJ0dmFsaWRhdGlvbi5jb20vVHJ1c3RQcm92aWRlckJWVExTUlNBQ0FHMS5jcmww
TAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwgZoGCCsGAQUFBwEBBIGNMIGK
MDQGCCsGAQUFBzABhihodHRwOi8vc3RhdHVzZC5kaWdpdGFsY2VydHZhbGlkYXRp
b24uY29tMFIGCCsGAQUFBzAChkZodHRwOi8vY2FjZXJ0cy5kaWdpdGFsY2VydHZh
bGlkYXRpb24uY29tL1RydXN0UHJvdmlkZXJCVlRMU1JTQUNBRzEuY3J0MAkGA1Ud
EwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2ACl5vvCeOTkh8FZzn2Ol
d+W+V32cYAr4+U1dJlwlXceEAAABb4/vT3wAAAQDAEcwRQIgNCsuBGDvS0JsDgcc
2F5VqppJ3YnRkx7RLfJJZUDVQA0CIQD5RFr8WxId94/qrerH5Xr3zPlFOzjBx9ys
mRan/nTXGQB1ACJFRQdZVSRWlj+hL/H3bYbgIyZjrcBLf13Gg1xu4g8CAAABb4/v
T8wAAAQDAEYwRAIgUiJ+tRkWiRKKSvbKY7OyGT8S7u466Mj7pK36vAuRUdQCIHT/
LedSDuWsNpgTtwyWHqakE6GewZfckNs3aYPfz1IpAHcAQcjKsd8iRkoQxqE6CUKH
Xk4xixsD6+tLx2jwkGKWBvYAAAFvj+9POQAABAMASDBGAiEApOKN16d8Uzqdm/Vd
W1QGUpPF3RGKa3rTKpo+O68mrb0CIQCDsEOxSyInNM2BFYaRegnwkFFYb9MPuAHb
ZRQUpacC6DANBgkqhkiG9w0BAQsFAAOCAQEAjxRoG94z6l5s8D1Qby5skWcUmyCA
mu8jB+OddG2LXpCqqL7+TIOEzyxYnMf/wllZdpDZ5fHrqMSDKtibnD/C6NuBZiuy
dr00lcvOUFsNX/WMt4m5Gurv8hRV0WbcEjGL8EPJttUYd/qwDKRAckGJFfQ+nIVP
oyD45z0fo3BRbcifP6iMRqSbj6MUqrJ+BiR36A1d8BMzXWnuAfxbyCmnlQPoMmrC
kna3AO+ZcPmHBJcHb0oE4IG0Oa5Te+hy2Cn/d3nzQ6Dax0s21zfLQaNMaWSj89Qe
AdZJF0A++wYioIiY7mCDBxEQob//S9zdrRHzcltIr86CeSZycmVBiqFBxA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZVcHzgHX7MlyTjvlSsk
zDcTPVzqeHE9cZBKOK0BCjHF6zPrwuEvb5Odu8SWp+a7vsbDjQBQStAmgzyOPtHJ
o/xXUO9yJQ7JVILyff8OhH/gNH3WsU/m+JH2wpIXr0GHqSTtF9CwPcqH6nh/qhSD
ULqCChHFGfXsfNwCYNnD8DEXYagd9Gd8RRQvk98urzf7n9ocG0+hRGdFTHVTHUf+
H4H9BgGlly2JkrXhMwfD0tkSGcQ6zNWWygEkn7LQc4OLSYIlJVePEtDNnY+1le1c
ii1qESWdQqLVrEAeZ+09VG9perLpkLfaHS1zUUysHIlddGO9l/ZJpzecvUtcVaI+
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9954700494947955110252136639727180090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clikq-telecom.oxxio.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29487177144849182919954007095794897228605423864072902765249476058305320851153026990858038034627566811163588706199628356375785701428186043519832556485305078285421333399876891405132862144312453878433401519787902033088473177276143391364234303553794016181625995425336292935415746801555617174467490481068267307259417483447833464356541733969753145927436939780631834064786153048363258190762129410491462222933126158610668414815832219496850053690666060949776564366788152157579510967608348327216834951268818339570395118871783507219276613864829098916049024699408920801417050762745744784172586303927557789789308733962245627854351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f556221fd9bf6b592452b0e16acdc0e15767e9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							478db5ddd9b6b9380025fd05bc374d37ce2b39aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clikq-telecom.oxxio.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statusd.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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