onva-rjv.fgov.be

- Rijksdienst voor Jaarlijkse Vakantie -

Issued by QuoVadis Europe SSL CA G2

About this certificate

This digital certificate with serial number 64:47:bb:ce:c9:3d:98:22:db:06:21:a0:cf:9a:6e:3d:57:40:63:f2 was issued on by QuoVadis Trustlink B.V..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksdienst voor Jaarlijkse Vakantie

Organization: Rijksdienst voor Jaarlijkse Vakantie
State / Province: Bruxelles-Capitale, Région de
Locality: Bruxelles
Country: BE

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 64:47:bb:ce:c9:3d:98:22:db:06:21:a0:cf:9a:6e:3d:57:40:63:f2
Serial Number (int): 572498790354611094494750440889754324966811132914
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 8a:56:43:16:80:9e:42:1d:40:60:6c:11:65:fe:69:fa:e1:dc:6b:95
AuthorityKeyId: 2f:ad:64:aa:cf:29:0d:30:da:cb:44:3e:3f:d6:4f:ba:1a:9f:f1:78

Fingerprint (sha1): ea:e5:ed:b4:28:90:4b:35:c2:bb:91:46:79:9b:c9:64:0a:e1:b8:a9
Fingerprint (sha256): 35:b0:da:4d:83:1a:06:43:a9:9b:29:3e:8a:d8:4f:3c:41:11:d6:2f:4f:72:10:08:bc:54:19:79:7b:29:0e:91

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadiseuropesslcag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadiseuropesslcag2.crl

Check the revocation status for certificate onva-rjv.fgov.be

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onva-rjv.fgov.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onva-rjv.fgov.be
*.onva-rjv.fgov.be
*.rjv.be
*.onva.be
*.lju.be
*.onva-rjv.be
*.rjv-onva.be
*.rjv-onva.fgov.be
*.onva.fgov.be
*.rjv.fgov.be
*.lju.fgov.be
*.meinurlaubsgeld.be
*.meinurlaubskonto.be
*.mijnvakantiegeld.be
*.mijnvakantierekening.be
*.moncomptedevacances.be
*.monpeculedevacances.be
rjv.be
onva.be
lju.be
onva-rjv.be
rjv-onva.be
meinurlaubsgeld.be
meinurlaubskonto.be
mijnvakantiegeld.be
mijnvakantierekening.be
moncomptedevacances.be
monpeculedevacances.be

Other certificates including the domain name fgov.be

(limited to 100 certificates)
kruispuntbank.fgov.be
eservices.minfin.fgov.be
dabs-acc.ext.wss.just.fgov.be
bpp.economie.fgov.be
www.business.belgium.be
minfin.be
eolf.economie.fgov.be
cap.mobilit.fgov.be
wwwacc.capac-hvw.fgov.be
ilite.wss.just.fgov.be
air.mobilit.fgov.be
justsignal-acc.client.just.fgov.be
www.rsvz.fgov.be
webdwtc01.rrn.fgov.be
jft-acc.wss.just.fgov.be
www.capac-hvw.fgov.be
www.incc.fgov.be
sdvampf001.intra.just.fgov.be
spvwebtpi001.intra.just.fgov.be
webdwtc01.rrn.fgov.be
portal.health.fgov.be
HVB-Liege.just.fgov.be
apptst.riziv.fgov.be
moncomptedevacances.be
*.ehealth-09.paas.cloud.ehealth.fgov.be
www.ehealth.fgov.be
natgw-eessi.ksz-bcss.fgov.be
wahlen.fgov.be
c-b2b.SPFETCS-FODWASO.fgov.be
www.likiv.fgov.be
www.capac-hvw.fgov.be
appsoc.caami-hziv.fgov.be
bibforum.fgov.be
*.statbel.fgov.be
appsoc.caami-hziv.fgov.be
ccff02.minfin.fgov.be
handicap.belgium.be
news.sfpd.fgov.be
ede.onssrszlss.fgov.be
hbca.client.just.fgov.be
savdiv000.intra.just.fgov.be
eucertificates.economie.fgov.be
handicap.belgium.be
residencepalace.be
archi.ccecrb.fgov.be
auth-signing.sigedis.fgov.be
premier.be
www.mybenefits.fgov.be
auth.minfin.fgov.be
www.rsvz.be
vsp.smals.be
forfaitdebase.economie.fgov.be
login.dev.mobilit.fgov.be
mailings.ibz.fgov.be
FODJ-STS-Token-Signing-2018.just.fgov.be
bel1fedlaeaacc01.fed.oncsfm.com
meldpunt.belgie.be
ibz.be
telework.just.fgov.be
circa.health.fgov.be
PAUTH.riziv.fgov.be
e.koba.be
accreditation-new.belgium.be
b2b-tst.rsvz-inasti.fgov.be
stvjira000.intra.just.fgov.be
spvnpsradius001.intra.just.fgov.be
auth.meta.fgov.be
ede.onssrszlss.fgov.be
emm.rrn.fgov.be
*.vpn2.fanc.fgov.be
kce.fgov.be
savelasticb000.intra.just.fgov.be
appsoc.caami-hziv.fgov.be
rsvz-inasti.fgov.be
adldsacc.integration.just.fgov.be
spvxwiki000.intra.just.fgov.be
bgcturn.intra.just.fgov.be
biblio.intra.just.fgov.be
arttiepe.intra.just.fgov.be
www.sigedis.fgov.be
fgov.be
www.riziv.fgov.be
savsdstatbe000.intra.just.fgov.be
viewportal.integration.just.fgov.be
www.decroo.belgie.be
bel1fedlaeaacc01.fed.oncsfm.com
www.capac-hvw.fgov.be
HVB-Mons-test.just.fgov.be
nrmobility.mobilit.fgov.be
infradocs.just.fgov.be
ccff02.minfin.fgov.be
test.ehealthplatform.info
www.caami-hziv.fgov.be
ibz.be
acc-cjcsr.just.fgov.be
www.webapp.rrn.fgov.be
*.apps-acc.mobilit.fgov.be
casfactory-dev.intra.just.fgov.be
enigloket.acc.mobilit.fgov.be
DAC-X3.rsvz-inasti.fgov.be

Certificate

The complete raw certificate details for onva-rjv.fgov.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypWruMG2BHnQA0lvR6zw
D0Y4cc3appXRhLKpgpJdcl2jtJCcbvYXkZ6OblyeIzetWJZxM+ordLMOWNA1yqry
qYT+wAHs1c3pR3JvsODeV8JEQSi8Pocn7ckSjXZA90cwIHCUjz37tzE0IAVBd4L0
+i/QQxfmkDbE5jM4v6dIYkJaYnm2SY/aInOi+6FeMlTJMFLRWBaNOHYQMr6u1G27
EAyXPaPOwvYVv6OXaSJcfUfiVyF8JPbbykIpyyMDoZIEsDxfEy4sQXK3QO3VsNGh
8bKCad6zkEqdImverxhQLSpviYVIsTkool1E7gs54dtbDir+y5s5xYpiXGPHo2FX
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 572498790354611094494750440889754324966811132914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Europe SSL CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 07:18:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 23:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksdienst voor Jaarlijkse Vakantie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'onva-rjv.fgov.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25573943019429407320557790345815321331923251685370755264395869556859433069396498224374752146426375445475351396845530011486113976730850507374750053007231916042729704582269480222168424950539014479988561606448739233419406027108310530076478865918117102123391069443348535494644803201213027326081719941908955116178554225512472631273990919643737212725185419871035441367055716891895157586651376400060037287918025984300164379580509821196351267188466216902370510300004011783612019888622763935283922332624267148510520991209443856368600163676903180601598836863955393823504041362493542579310134834290095006572404260327698831857557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2fad64aacf290d30dacb443e3fd64fba1a9ff178
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadiseuropesslcag2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (502 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onva-rjv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onva-rjv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onva.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lju.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onva-rjv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjv-onva.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjv-onva.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onva.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lju.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meinurlaubsgeld.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meinurlaubskonto.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mijnvakantiegeld.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mijnvakantierekening.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moncomptedevacances.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monpeculedevacances.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onva.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lju.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onva-rjv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjv-onva.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinurlaubsgeld.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinurlaubskonto.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnvakantiegeld.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnvakantierekening.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncomptedevacances.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monpeculedevacances.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadiseuropesslcag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a564316809e421d40606c1165fe69fae1dc6b95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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