api.vgz.nl
- VGZ Zorgverzekeraar N.V. -
Issued by QuoVadis Global SSL ICA G2
About this certificate
This digital certificate with serial number 01:40:0c:a8:8d:f9:3f:17:d3:ef:35:36:f2:39:7c:03:9b:f9:35:14 was issued on by QuoVadis Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
VGZ Zorgverzekeraar N.V.
Organization:
VGZ Zorgverzekeraar N.V.
State / Province:
Gelderland
Locality: Arnhem
Country: NL
Locality: Arnhem
Country: NL
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate has expire since
Certificate Details
Serial Number (hex): 01:40:0c:a8:8d:f9:3f:17:d3:ef:35:36:f2:39:7c:03:9b:f9:35:14Serial Number (int): 7137341167113932249004650865426513155755422996
Serial Number lenght: 153 bits, 20 octets
SubjectKeyId: 90:d2:c6:74:35:a1:20:70:44:f3:ca:c8:69:6c:ae:39:fd:f3:e7:a1
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27
Fingerprint (sha1): 52:11:3f:b0:44:ef:27:51:5e:a8:b0:8f:56:18:11:dd:73:ec:bf:bc
Fingerprint (sha256): 27:54:46:5f:f6:2a:27:06:70:c6:19:6f:32:9c:a4:3b:0a:be:0d:46:ac:80:8b:d5:b2:8f:a5:ca:68:15:e9:b0
Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl
Check the revocation status for certificate api.vgz.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.vgz.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.vgz.nl
cdn.vgz.nl
cdn.vgz.nl
Other certificates including the domain name vgz.nl
(limited to 100 certificates)
feedback.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl
Certificate
The complete raw certificate details for api.vgz.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH8DCCBtigAwIBAgIUAUAMqI35PxfT7zU28jl8A5v5NRQwDQYJKoZIhvcNAQEL BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTIyMDYxMzA3MzIy MVoXDTIzMDcxMjAwMDAwMFowazELMAkGA1UEBhMCTkwxEzARBgNVBAgMCkdlbGRl cmxhbmQxDzANBgNVBAcMBkFybmhlbTEhMB8GA1UECgwYVkdaIFpvcmd2ZXJ6ZWtl cmFhciBOLlYuMRMwEQYDVQQDDAphcGkudmd6Lm5sMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAyp4RfGPa0TchDqJhzoeAHiPL58UGw1aZe7QbbgxdM1K6 UYGiLsZ7Q2kvvvZXyLIzS9pNiDSv65E7HRmKxXfqgBa6qBBKUJY1g8J55e60dJ70 +D6ExgR+d6sgEs2FqdteXFVnW/c/hct3nuBjrXF0KGa7g9DhcjD8AAPmC9Ql0qpn EGfkTSQ6sWYl2Te2gHJrbKkVtN3G5bRpmhC3vZ3QPxxck+XSTZ60kXT8OqdpsM0Y YlH9Ez70+EFYGukN8yy4ZnZkJlekiPl3fj7SVjFXNIWrLPypTnCfR6cPc5Pd22Nc zSIB3UiIVjQpW9kYDa60jTDZ0X3Ic0DETOe2rAL3GAYe7W/RYcwwNPVwv6Ed2Aps v3PK+KuQJVVnyPnAuSgJJa4EOWLRsMzOrVYn0/KW/DT/Y1MqQwoU7RrZilRnCLi1 Q0FJi6uOl5CGmI0XBFAZjweJnzjHZN53HAmpSKzZtY+5SrbzKbu8sVgK2aNLVeLq joECRSe2ympG09yKtLEZJmiZwdp4tTDQaFweoLF7HKaAA/qI8+W6NabzyYHEHCn8 dOJBLyk/k3XzjzXO13FYoyKROjdRWW3vZcqetrZzjhACboDapcjDZEwY6c+5xjWW f8Z8nq18yeXVnwiC5XgXBKE6hucd8HZUyZA1YTGiebzF8cjl9QKWTgfy+b5apqkC AwEAAaOCA6gwggOkMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUkRlirVsXpzD78N45 JbG9jLm4UScwcwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1 c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzIuY3J0MCoGCCsGAQUFBzABhh5o dHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wIQYDVR0RBBowGIIKYXBpLnZn ei5ubIIKY2RuLnZnei5ubDBbBgNVHSAEVDBSMEYGDCsGAQQBvlgAAmQBATA2MDQG CCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbS9yZXBvc2l0 b3J5MAgGBmeBDAECAjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwOgYD VR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5xdW92YWRpc2dsb2JhbC5jb20vcXZz c2xnMi5jcmwwHQYDVR0OBBYEFJDSxnQ1oSBwRPPKyGlsrjn98+ehMA4GA1UdDwEB /wQEAwIFoDCCAfUGCisGAQQB1nkCBAIEggHlBIIB4QHfAHYAejKMVNi3LbYg6jjg Uh7phBZwMhOFTTvSK8E6V6NS61IAAAGBW/7CgwAABAMARzBFAiEA4yxnw9dPDSFX ES1K/VlqhuSYQCgaLuvgc7lb8H1RY2ICIFyQs2cD83ykTZSb7XdpQlqDHhQy/IBu 84tcEUO+tmg/AHUArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGB W/7CdAAABAMARjBEAiB/g1gAW8u01UqSCr6ZV7JsXBBwk90mgRMe4KbyjBp8RgIg TwSgVIbwK4p+TnAqb5nzNJFV9lvek9ydICr6SGnd73cAdgDoPtDaPvUGNTLnVyi8 iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYFb/sJPAAAEAwBHMEUCIQD2xdbiM7Pt74QR qGfHCWhkzJHdiWwH2Z1acURqdDuanAIgMzcn0eVvEhOu2NDEa4XVM5f8DHofhLer vt+7CP3ekZoAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAYFb /sKKAAAEAwBHMEUCIQDxB5mqde3VT4SLwN0nrmIbro9fzQ5SdnsDhm1M/VRSFQIg FlDAefky3pZnS0SditzRddNVsRHznEbb0I6uO05WsMkwDQYJKoZIhvcNAQELBQAD ggEBAHMYftobQ9O7LZYL3u2Jz6Jp9dcYI4MKfq34HSD4ZLRzn+ct9hDIzX6aGo/K TzHtn1NWBAaMLYDO17elHhnfbDgYZ7gvgZGoh4VhIj9M6+uHjmFBTWyqV5SGK1+H IznOSgBSxtVIkSnAxcfHIddyj4E03jd713Ev0qm9nuvYoI06+Rf9x2kmwuQ6mMfK xjKx0eDiHgL4mGMzvZpaOSFdY4nBBRzhCgNzwxvGrkU/lO/cWAtNBMRdgKmeET5H VdFSng+1oWbEzwQKgKbXPAj84heE1NtfqB4VFtQCmacY8XDc3Y0ohbEeBNMczCA7 OUddYf+/r98QotRZJNuw90W2qMM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyp4RfGPa0TchDqJhzoeA HiPL58UGw1aZe7QbbgxdM1K6UYGiLsZ7Q2kvvvZXyLIzS9pNiDSv65E7HRmKxXfq gBa6qBBKUJY1g8J55e60dJ70+D6ExgR+d6sgEs2FqdteXFVnW/c/hct3nuBjrXF0 KGa7g9DhcjD8AAPmC9Ql0qpnEGfkTSQ6sWYl2Te2gHJrbKkVtN3G5bRpmhC3vZ3Q Pxxck+XSTZ60kXT8OqdpsM0YYlH9Ez70+EFYGukN8yy4ZnZkJlekiPl3fj7SVjFX NIWrLPypTnCfR6cPc5Pd22NczSIB3UiIVjQpW9kYDa60jTDZ0X3Ic0DETOe2rAL3 GAYe7W/RYcwwNPVwv6Ed2Apsv3PK+KuQJVVnyPnAuSgJJa4EOWLRsMzOrVYn0/KW /DT/Y1MqQwoU7RrZilRnCLi1Q0FJi6uOl5CGmI0XBFAZjweJnzjHZN53HAmpSKzZ tY+5SrbzKbu8sVgK2aNLVeLqjoECRSe2ympG09yKtLEZJmiZwdp4tTDQaFweoLF7 HKaAA/qI8+W6NabzyYHEHCn8dOJBLyk/k3XzjzXO13FYoyKROjdRWW3vZcqetrZz jhACboDapcjDZEwY6c+5xjWWf8Z8nq18yeXVnwiC5XgXBKE6hucd8HZUyZA1YTGi ebzF8cjl9QKWTgfy+b5apqkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7137341167113932249004650865426513155755422996 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-13 07:32:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 00:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arnhem' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VGZ Zorgverzekeraar N.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.vgz.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 826607095567977501961341524593113339931985175808067943890325727902578299015666541337531403529588509853812348219570298577835888443017079556435766039289796376647269500911520819483661416011978352355669018988037236745007109280983692942992849343014243416976745402702472339422695659833224246018223626893046667186916440738755389152565046610947564317467326843463470490667852036426063312072474072779838214875328175043317841854429972496939392505843250876149516889460816998026120804447876761169663432249176759747152974810058565703536190218957600202676192604374318556794888378319517384699141197679363441601300141257699977665070462447997653469620606947814162255956531594508824149541435278197973104593165451233492791156492501758340275586437245336057650621731749297947759122360569025014726336763470547248727062307721233036808549108515621327303629448066495765717359829803825517086112270625896254273808899557596103131114253000022553705610719402500470134007027124812491489965627404961246196013145590596806427512367071162593470671604361188269522447986772477206242400617560910875196211283374273626662074296287385642006315337811782398822385736724832927331147373469994665523108515237311482358650296135491645590537900952033344878843975688579389405194266281 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vgz.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 90d2c67435a1207044f3cac8696cae39fdf3e7a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 01df0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001815bfec2830000040300473045022100e32c67c3d74f0d2157112d4afd596a86e49840281a2eebe073b95bf07d51636202205c90b36703f37ca44d949bed7769425a831e1432fc806ef38b5c1143beb6683f007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001815bfec274000004030046304402207f8358005bcbb4d54a920abe9957b26c5c107093dd2681131ee0a6f28c1a7c4602204f04a05486f02b8a7e4e702a6f99f3349155f65bde93dc9d202afa4869ddef77007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001815bfec24f0000040300473045022100f6c5d6e233b3edef8411a867c7096864cc91dd896c07d99d5a71446a743b9a9c0220333727d1e56f1213aed8d0c46b85d53397fc0c7a1f84b7abbedfbb08fdde919a0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001815bfec28a0000040300473045022100f10799aa75edd54f848bc0dd27ae621bae8f5fcd0e52767b03866d4cfd54521502201650c079f932de96674b449d8adcd175d355b111f39c46dbd08eae3b4e56b0c9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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