adfs.northernart.ac.uk

- The Northern School of Art -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 22:a0:36:50:9f:5c:6c:65:68:3e:b9:df:fc:37:a1:68:57:86:ce:fe was issued on by QuoVadis Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Northern School of Art

Company registration number: Further and Higher Education Act 1992
Organization: The Northern School of Art
Organization unit: IT
State / Province: Cleveland
Locality: MIDDLESBROUGH
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 22:a0:36:50:9f:5c:6c:65:68:3e:b9:df:fc:37:a1:68:57:86:ce:fe
Serial Number (int): 197678536937632253430299309975764244960761007870
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 58:d1:f8:55:f3:df:a8:1f:72:9d:17:59:35:45:66:76:0e:b5:e8:5b
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 2e:af:74:2f:2c:39:bb:16:15:34:3a:20:13:1a:8a:8f:ec:50:ab:58
Fingerprint (sha256): 3a:ae:62:dc:b3:65:82:e1:e6:aa:b8:18:ea:89:88:05:12:70:0f:ad:89:33:dc:7e:e2:a1:36:7d:3f:15:fd:ec

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate adfs.northernart.ac.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs.northernart.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs.northernart.ac.uk
autodiscover.northernart.ac.uk
fed.ccad.ac.uk
fed.northernart.ac.uk

Other certificates including the domain name northernart.ac.uk

(limited to 100 certificates)
www.northernart.ac.uk
*.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
northernart.ac.uk
adfs.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
adfs.northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
adfs.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
*.northernart.ac.uk
northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
northernart.ac.uk
moodle.northernart.ac.uk

Certificate

The complete raw certificate details for adfs.northernart.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG2zCCBMOgAwIBAgIUIqA2UJ9cbGVoPrnf/DehaFeGzv4wDQYJKoZIhvcNAQEL
BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd
BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMTgxMDI1MDgzMjIwWhcN
MTkxMDI1MDg0MjAwWjCB7TETMBEGCysGAQQBgjc8AgEDEwJHQjEaMBgGA1UEDwwR
R292ZXJubWVudCBFbnRpdHkxLjAsBgNVBAUTJUZ1cnRoZXIgYW5kIEhpZ2hlciBF
ZHVjYXRpb24gQWN0IDE5OTIxCzAJBgNVBAYTAkdCMRIwEAYDVQQIDAlDbGV2ZWxh
bmQxFjAUBgNVBAcMDU1JRERMRVNCUk9VR0gxIzAhBgNVBAoMGlRoZSBOb3J0aGVy
biBTY2hvb2wgb2YgQXJ0MQswCQYDVQQLDAJJVDEfMB0GA1UEAwwWYWRmcy5ub3J0
aGVybmFydC5hYy51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTs
vMH6Jd/LWFNzevFe5fq1CZw2rwCwPKuMu3F6k1p/YVXYkomUB6Uiakn/FbY8oXiJ
J2pgk/bwBnpHgSm+hviVShDkNHyBNF8g8Otrt3HtGxce0xrhb61hwwX6jfUJpaAF
dPSyybfBWEI1f4nuHAhXDRo8nwZh3vIMT75I5aCWwvUY7Cy/MghZu+ak50VnA9VE
VZWIKqqw8iAGi/nbBzqD03tU2IXUjz5zkVK47cl5n5/eaCiTX3oe7iZejx4yyeFi
4E0oe/9p9L4FnhCi5v9uWb7xahU0XO8s68g7irvTKDpeE64PrwuxpllmmcDTcMfh
vFwrpPgEORhD6m7KAA0CAwEAAaOCAhQwggIQMAwGA1UdEwEB/wQCMAAwHwYDVR0j
BBgwFoAU5YRU0JBJnzi68snhKgjFTp+gSD8weAYIKwYBBQUHAQEEbDBqMDkGCCsG
AQUFBzAChi1odHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2ZXZzc2xn
My5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6Ly9ldi5vY3NwLnF1b3ZhZGlzZ2xvYmFs
LmNvbTBoBgNVHREEYTBfghZhZGZzLm5vcnRoZXJuYXJ0LmFjLnVrgh5hdXRvZGlz
Y292ZXIubm9ydGhlcm5hcnQuYWMudWuCDmZlZC5jY2FkLmFjLnVrghVmZWQubm9y
dGhlcm5hcnQuYWMudWswWgYDVR0gBFMwUTBGBgwrBgEEAb5YAAJkAQIwNjA0Bggr
BgEFBQcCARYoaHR0cDovL3d3dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9y
eTAHBgVngQwBATAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwPAYDVR0f
BDUwMzAxoC+gLYYraHR0cDovL2NybC5xdW92YWRpc2dsb2JhbC5jb20vcXZldnNz
bGczLmNybDAdBgNVHQ4EFgQUWNH4VfPfqB9ynRdZNUVmdg616FswDgYDVR0PAQH/
BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQBO
YNot2hMSuMi/JoNhOvOEUN5580wuwHnHaJnQTjjLErhXJGQUlI1BXNXWzUPhVmAP
+wKOrzVC+WCHDw6e8pm8+9tS4wc9Unv9mfUlj3s2OIHWjcURqXe5Df53Kbm/IVOF
gCskjQpN6+Gzz0L8EBmbvcPuBsGioaUWlhOOGj4nYrZ61pl9bsP5VOQU/i9PI+lx
51VLAzFVL1y7xtLJWWresJDawEGjWGCYkyX4zCpdgrzLHkO0wRjSMfufgs4cPHko
9o0dEzim0OsG1tCZaQjaUoXMiU1pCsZpTbpPs/R4n7/adbOnTeBuwUHt5UpFGlcc
K7BOYpnJraH1BKKJtiTEfy6C9gaC1HBqVqhwiZwUdzxoKbpSQShGcFHN97LLzLpf
CYUV/jHWunKXdMYRvuj0U9cDHA2zUiJM7S3pBf52ytCNcXVU07yks5jnqddfb1LX
MGyHejCjMjeANB35BmaXYvBbdVbse84yWj44bgDvWeU4CCd+o+ZbxWCC+MG8g+I9
WdrlNTj1AO8jJ0fYBhOU+xId/9Sbr3Jt2MkkEFY6797vCfm4F/ZnNGI1pI7b+Nqo
tvi3ES9VXjdUv34+PFdlZeFNiwHISQpyQ1+vC0v7Fo5/xql0AYqHS5/B/VD0FXR9
rsn7bCkyp44b95I9G+1+P+j7KGnsumohcfrzKuPAKw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOy8wfol38tYU3N68V7l
+rUJnDavALA8q4y7cXqTWn9hVdiSiZQHpSJqSf8VtjyheIknamCT9vAGekeBKb6G
+JVKEOQ0fIE0XyDw62u3ce0bFx7TGuFvrWHDBfqN9QmloAV09LLJt8FYQjV/ie4c
CFcNGjyfBmHe8gxPvkjloJbC9RjsLL8yCFm75qTnRWcD1URVlYgqqrDyIAaL+dsH
OoPTe1TYhdSPPnORUrjtyXmfn95oKJNfeh7uJl6PHjLJ4WLgTSh7/2n0vgWeEKLm
/25ZvvFqFTRc7yzryDuKu9MoOl4Trg+vC7GmWWaZwNNwx+G8XCuk+AQ5GEPqbsoA
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 197678536937632253430299309975764244960761007870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 08:32:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 08:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Further and Higher Education Act 1992'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cleveland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MIDDLESBROUGH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Northern School of Art'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'adfs.northernart.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22839634424650073752592107905896261920977510855040338756199388196862212774744135781308570118794216751378257330805806846442346135335792447567396849829644507836760848606770772197968300202031367476624953293020987326047843142760612406751039094106330498982651806742357176125395956820019719452082924676510392126184011980895406634223990265829631178731053837785972524435657877091277860327415507800494874078280006314293163364012507709645423858988722218313552103646384399534110784968614308816323399088947477698034420006646174733512313866327239036222063340620173096379735584316353105055244992046351536535685258543642855971880973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.northernart.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.northernart.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fed.ccad.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fed.northernart.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58d1f855f3dfa81f729d1759354566760eb5e85b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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