isafrance.vwfs.com

- Volkswagen Financial Services AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 42:4e:b8:5f:ed:12:5f:cf:bb:df:4e:0f:d6:8b:45:62:d5:b9:09:87 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Financial Services AG

Organization: Volkswagen Financial Services AG
Organization unit: IH-IOIT
State / Province: Niedersachsen
Locality: Braunschweig
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 42:4e:b8:5f:ed:12:5f:cf:bb:df:4e:0f:d6:8b:45:62:d5:b9:09:87
Serial Number (int): 378548910302417538210728621846065380835299232135
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 66:80:2f:32:1c:be:85:1c:95:87:eb:bd:a2:ec:aa:aa:98:68:a7:7a
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 8d:6c:5e:c7:2e:6b:f9:df:04:17:de:d5:39:09:4f:2f:ab:b5:c6:25
Fingerprint (sha256): 2c:16:70:e0:28:33:57:a8:3c:47:6b:10:d9:66:8d:13:18:80:74:5d:6e:5a:46:d9:4c:92:7d:c6:4c:ca:6f:d5

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate isafrance.vwfs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for isafrance.vwfs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

isafrance.vwfs.com

Other certificates including the domain name vwfs.com

(limited to 100 certificates)
fleetonline-i.vwfs.com
ras-mx.vwfs.com
signin-i.vwfs.com
git.vwfs.com
www.karriere.vwfs.com
karriere.vwfs.com
lyncdiscover.vwfs.com
posfr.vwfs.com
cmsvw.volkswagenfinancialservices.pt
www.vwfsag.de
dsm.vwfs.com
auth.vwfs.com
apac.webaccess.vwfs.com
isafrance.vwfs.com
sync.vwfs.com
milesweb-p.vwfs.com
www.vwfsag.de
tmt-kons.vwfs.com
collaboration.vwfs.com
tmt.vwfs.com
ibaidp-i.vwfs.com
employee-www.vwfs.com
miles-cons.vwfs.com
webaccess.vwfs.com
access.vwfs.com
auth.vwfs.com
pos-int.vwfs.com
sharepoint.vwfs.com
lzi-gp.vwfs.com
lzi.vwfs.com
af-sandbox.vwfs.com
milesweb-p.vwfs.com
auth.vwfs.com
ibasts-i-02.vwfs.com
sip2.vwfs.com
karriere.vwfs.com
collaboration.vwfs.com
guestaccess.vwfs.com
dev.moor4nature.vwfs.com
isafrance.vwfs.com
www.pricing-tool.vwfs.com
guestaccess.vwfs.com
apis.vwfs.com
ibasts-k.vwfs.com
isafrance.vwfs.com
milesweb-k.vwfs.com
ras-europe.vwfs.com
dsm.vwfs.com
apis-kons.vwfs.com
www.vwfsag.de
apis-kons.vwfs.com
vwfshellas.vwfs.com
www.karriere.vwfs.com
EMEA-DE-WEB1.vwfs.com
signin-i.vwfs.com
www.dev.chargeandfuel.vwfs.com
sfe-kons.vwfs.com
vrent.vwfs.com
vwfshellas-cons.vwfs.com
collaboration.vwfs.com
access-en.vwfs.com
dev.chargeandfuel.vwfs.com
tmt-kons.vwfs.com
workplace.vwfs.com
webaccess.vwfs.com
india-lsi.vwfs.com
access-new.vwfs.com
iba.login-c.vwfs.com
karriere.vwfs.com
collaboration.vwfs.com
fleetonline.vwfs.com
signin.vwfs.com
mobile.vwfs.com
apis-int.vwfs.com
ras-sgp.vwfs.com
karriere.vwfs.com
posfr.vwfs.com
milesweb-p.vwfs.com
mobile.vwfs.com
sharepoint.vwfs.com
ras-brazil.vwfs.com
webcalc-broker-test.vwfs.com
mobile-c.vwfs.com
access-en.vwfs.com
access.vwfs.com
vwfs.com
milesweb-k.vwfs.com
git.vwfs.com
milesweb-p.vwfs.com
digital-workplace.vwfs.com
sync.vwfs.com
autovermietung.vwfs.de
milesweb-p.vwfs.com
posfrkons.vwfs.com
Lyncdiscover.vwfs.com
mobile.vwfs.com
aurora-ci.vwfs.com
milesweb-k.vwfs.com
karriere.vwfs.com
dev.about-ernst.vwfs.com

Certificate

The complete raw certificate details for isafrance.vwfs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIDzCCBfegAwIBAgIUQk64X+0SX8+7304P1otFYtW5CYcwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTE4MDUyODEzMTkw
NloXDTIwMDUyODEzMjkwMFowgZYxCzAJBgNVBAYTAkRFMRYwFAYDVQQIDA1OaWVk
ZXJzYWNoc2VuMRUwEwYDVQQHDAxCcmF1bnNjaHdlaWcxKTAnBgNVBAoMIFZvbGtz
d2FnZW4gRmluYW5jaWFsIFNlcnZpY2VzIEFHMRAwDgYDVQQLDAdJSC1JT0lUMRsw
GQYDVQQDDBJpc2FmcmFuY2Uudndmcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzwa+BHx1NP8/LFWMRJPDTN7Bj22Y/Lpj+u0tINbuUi5IhtUIV
3kDQpuOQmuCC7H3lofsDZEdHdH1KMxfg8lovmfWvax2ptHRWwKgYB/hdUpNksDY4
IKr85yU7thDhx/Ol7WP9toLrpO2BWp3JNrMPlpOZaZ48QlVRgK2yaITTJWuSMDML
KR6F5VYwA8DR2wsSA93BPhJlKL/8Rz14zHmhQ9KnGTh05xurD/QJi/hobqBZxty1
PxO6J2aW9zd2fEuIVkfrrDb3sigkenCXPptFAueQvOiUmZjuYtnsngX+riU7EP0T
2EqM2S71QpRrBuOqZJhcqFXu3R8Uo2dZIrnlAgMBAAGjggObMIIDlzAJBgNVHRME
AjAAMB8GA1UdIwQYMBaAFLMSibWpSzW8FQDwgOnYeIfxE3x2MHMGCCsGAQUFBwEB
BGcwZTA3BggrBgEFBQcwAoYraHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNv
bS9xdnNzbGczLmNydDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVvdmFkaXNn
bG9iYWwuY29tMB0GA1UdEQQWMBSCEmlzYWZyYW5jZS52d2ZzLmNvbTBRBgNVHSAE
SjBIMEYGDCsGAQQBvlgAAmQBATA2MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1
b3ZhZGlzZ2xvYmFsLmNvbS9yZXBvc2l0b3J5MB0GA1UdJQQWMBQGCCsGAQUFBwMC
BggrBgEFBQcDATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlz
Z2xvYmFsLmNvbS9xdnNzbGczLmNybDAdBgNVHQ4EFgQUZoAvMhy+hRyVh+u9ouyq
qphop3owDgYDVR0PAQH/BAQDAgWgMIIB9gYKKwYBBAHWeQIEAgSCAeYEggHiAeAA
dgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWOm8CaGAAAEAwBH
MEUCIQCfy3gzPa78XgGi2imk8g1UzYHHrVZaYtWGYyIZ64t6gQIgEEhHdEVtm4db
CahImvBJoZB9zdDQpfVE4W/Ufg5tDJYAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb
37jjd80OyA3cEAAAAWOm8CaxAAAEAwBHMEUCIQDC2XxPUsGcrEk6rqlZ5FcfQZFl
KlC4c142L82WolSJAgIgJChnPNWeTurqorWJ+wEyJEiDzhymFwy/RttSM8bQ4oUA
dwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWOm8ChlAAAEAwBI
MEYCIQCQkx1k3PTRsuk8SVw9x4UpiYu0uB9d6Le7Qwe7jGK86gIhAJ3AuJwDPU7L
K4/AHZOasDqAvcRi98ucl5+OVKi6PewUAHUAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZ
EVzA75SYVdaJ0N0AAAFjpvAoEgAABAMARjBEAiA1otSsSgC0pKkWihN8l5AG9Bxl
Rg9AqUSqSZnaewyuogIgVlxxiv0tgrbG05grDtFed2T7unrH/pJcQM24E7+qN+gw
DQYJKoZIhvcNAQELBQADggIBABj58xak+s0Q1xoAnx7o6/BHBzjCQtVOSvSdiKmL
CTAoDn5cobOfBML8T9DkX/1qaIWqG+2K6NseVXWaZkhu+YhGg0wPt0QbRyyBxlEB
HXzgPL8dmLjCzp+YVAwVF0PYR9sEMFJCe42vqgwRPvPPzQmHpwKEFrGLR5r6B/ws
5eGQpfWIBU7QJgeLOFTxeunN9ABgISaiLqPj+R3M2Rh3HMcKsHZshMFCk9VnzJcc
LgXPmsJp7JUwliZQcGlBBMnwdxupLSQiVqJkSZJzE9ha4W5I4gmm76yvPNUmmvSa
eTpT82bGa1jZfgpiI1G/QkFku5QQjYLCjjTZM1IGNMzvt/GsXncs+HOnB5KtHXX8
lfqScrLEhwrvXFLHkHddIDXDcjgbhNivcMs1wDfr3e0U8l3odzChQgCK2ZbJ6qjR
482fEJp1+zA1shAp1qhgXQTZJZF1RYItipRE4c/O/hsNrJmspUjVOy601XRebWnr
5xr3UO+JyNEy0bOi0uWVJTmaMPfsMM0wcnpCk0hNxFr1mjrx0gYJwb8iCBDrqzwP
uIMRxyAWCqD35TYmO6LWLr+WSOT7hpYi5CkgL5z4ghF2RYdiwcQufpTaiIXM30+G
QsjV0S/bWKlBWQeX7C9zrITDIJ/frANDni56+Ha/TtgRqVl6FsN/KFWEXczS21Z1
BPzV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8GvgR8dTT/PyxVjESTw
0zewY9tmPy6Y/rtLSDW7lIuSIbVCFd5A0KbjkJrggux95aH7A2RHR3R9SjMX4PJa
L5n1r2sdqbR0VsCoGAf4XVKTZLA2OCCq/OclO7YQ4cfzpe1j/baC66TtgVqdyTaz
D5aTmWmePEJVUYCtsmiE0yVrkjAzCykeheVWMAPA0dsLEgPdwT4SZSi//Ec9eMx5
oUPSpxk4dOcbqw/0CYv4aG6gWcbctT8Tuidmlvc3dnxLiFZH66w297IoJHpwlz6b
RQLnkLzolJmY7mLZ7J4F/q4lOxD9E9hKjNku9UKUawbjqmSYXKhV7t0fFKNnWSK5
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378548910302417538210728621846065380835299232135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-28 13:19:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-28 13:29:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Braunschweig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Volkswagen Financial Services AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IH-IOIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'isafrance.vwfs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22692166500230294441384117253494312752128341906534621603530627191327044174251295773075209453226696581561357391166027860812960005908014516106982828630457593943862452146651554479713473111655761866244960901474433509740206253005696568985600016467360031332345747991398683575466114896002298001759410989171244286914195178267326909689576334099374248339251571764673492460764208257434209131491159468532384923613520485380647123278280419975356311655806356573310086773341002710721639086612048117962727494066671770286354654761066088163964775054083387527059599604384371827383159477301246832164591531861454276806724228297761522629093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isafrance.vwfs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66802f321cbe851c9587ebbda2ecaaaa9868a77a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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