onva-rjv.fgov.be

- Rijksdienst voor Jaarlijkse Vakantie -

Issued by QuoVadis Europe SSL CA G2

About this certificate

This digital certificate with serial number 22:ad:58:91:77:43:79:56:d6:bf:66:cd:39:ce:bd:e0:c3:af:13:38 was issued on by QuoVadis Trustlink B.V..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksdienst voor Jaarlijkse Vakantie

Organization: Rijksdienst voor Jaarlijkse Vakantie
State / Province: Bruxelles-Capitale, Région de
Locality: Bruxelles
Country: BE

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 22:ad:58:91:77:43:79:56:d6:bf:66:cd:39:ce:bd:e0:c3:af:13:38
Serial Number (int): 197971430507990016504766699004736221831010128696
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 70:c2:09:39:04:54:c7:bb:10:7f:bd:49:e9:37:c0:28:70:29:44:b5
AuthorityKeyId: 2f:ad:64:aa:cf:29:0d:30:da:cb:44:3e:3f:d6:4f:ba:1a:9f:f1:78

Fingerprint (sha1): 63:c1:df:21:45:40:77:f8:1c:90:d9:19:9a:55:e5:68:fb:23:a8:a4
Fingerprint (sha256): 41:54:3d:e1:79:72:44:78:0e:7d:b1:88:6a:96:a4:d2:d7:cf:ca:16:16:01:24:e4:0a:bb:b5:39:a2:8e:7d:c5

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadiseuropesslcag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadiseuropesslcag2.crl

Check the revocation status for certificate onva-rjv.fgov.be

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onva-rjv.fgov.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onva-rjv.fgov.be
*.onva-rjv.fgov.be
*.rjv.be
*.onva.be
*.lju.be
*.onva-rjv.be
*.rjv-onva.be
*.rjv-onva.fgov.be
*.onva.fgov.be
*.rjv.fgov.be
*.lju.fgov.be
*.meinurlaubsgeld.be
*.meinurlaubskonto.be
*.mijnvakantiegeld.be
*.mijnvakantierekening.be
*.moncomptedevacances.be
*.monpeculedevacances.be
rjv.be
onva.be
lju.be
onva-rjv.be
rjv-onva.be
meinurlaubsgeld.be
meinurlaubskonto.be
mijnvakantiegeld.be
mijnvakantierekening.be
moncomptedevacances.be
monpeculedevacances.be

Other certificates including the domain name fgov.be

(limited to 100 certificates)
kruispuntbank.fgov.be
eservices.minfin.fgov.be
dabs-acc.ext.wss.just.fgov.be
bpp.economie.fgov.be
www.business.belgium.be
minfin.be
eolf.economie.fgov.be
cap.mobilit.fgov.be
wwwacc.capac-hvw.fgov.be
ilite.wss.just.fgov.be
air.mobilit.fgov.be
justsignal-acc.client.just.fgov.be
www.rsvz.fgov.be
webdwtc01.rrn.fgov.be
jft-acc.wss.just.fgov.be
www.capac-hvw.fgov.be
www.incc.fgov.be
sdvampf001.intra.just.fgov.be
spvwebtpi001.intra.just.fgov.be
webdwtc01.rrn.fgov.be
portal.health.fgov.be
HVB-Liege.just.fgov.be
apptst.riziv.fgov.be
moncomptedevacances.be
*.ehealth-09.paas.cloud.ehealth.fgov.be
www.ehealth.fgov.be
natgw-eessi.ksz-bcss.fgov.be
wahlen.fgov.be
c-b2b.SPFETCS-FODWASO.fgov.be
www.likiv.fgov.be
www.capac-hvw.fgov.be
appsoc.caami-hziv.fgov.be
bibforum.fgov.be
*.statbel.fgov.be
appsoc.caami-hziv.fgov.be
ccff02.minfin.fgov.be
handicap.belgium.be
news.sfpd.fgov.be
ede.onssrszlss.fgov.be
hbca.client.just.fgov.be
savdiv000.intra.just.fgov.be
eucertificates.economie.fgov.be
handicap.belgium.be
residencepalace.be
archi.ccecrb.fgov.be
auth-signing.sigedis.fgov.be
premier.be
www.mybenefits.fgov.be
auth.minfin.fgov.be
www.rsvz.be
vsp.smals.be
forfaitdebase.economie.fgov.be
login.dev.mobilit.fgov.be
mailings.ibz.fgov.be
FODJ-STS-Token-Signing-2018.just.fgov.be
bel1fedlaeaacc01.fed.oncsfm.com
meldpunt.belgie.be
ibz.be
telework.just.fgov.be
circa.health.fgov.be
PAUTH.riziv.fgov.be
e.koba.be
accreditation-new.belgium.be
b2b-tst.rsvz-inasti.fgov.be
stvjira000.intra.just.fgov.be
spvnpsradius001.intra.just.fgov.be
auth.meta.fgov.be
ede.onssrszlss.fgov.be
emm.rrn.fgov.be
*.vpn2.fanc.fgov.be
kce.fgov.be
savelasticb000.intra.just.fgov.be
appsoc.caami-hziv.fgov.be
rsvz-inasti.fgov.be
adldsacc.integration.just.fgov.be
spvxwiki000.intra.just.fgov.be
bgcturn.intra.just.fgov.be
biblio.intra.just.fgov.be
arttiepe.intra.just.fgov.be
www.sigedis.fgov.be
fgov.be
www.riziv.fgov.be
savsdstatbe000.intra.just.fgov.be
viewportal.integration.just.fgov.be
www.decroo.belgie.be
bel1fedlaeaacc01.fed.oncsfm.com
www.capac-hvw.fgov.be
HVB-Mons-test.just.fgov.be
nrmobility.mobilit.fgov.be
infradocs.just.fgov.be
ccff02.minfin.fgov.be
test.ehealthplatform.info
www.caami-hziv.fgov.be
ibz.be
acc-cjcsr.just.fgov.be
www.webapp.rrn.fgov.be
*.apps-acc.mobilit.fgov.be
casfactory-dev.intra.just.fgov.be
enigloket.acc.mobilit.fgov.be
DAC-X3.rsvz-inasti.fgov.be

Certificate

The complete raw certificate details for onva-rjv.fgov.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n8/Vt1Mj75w1h+oFu4z
cs7C5k3tbwwGZIDOXMMDKVF9JOA1zeCRk09bR4NCERw1IDD52/vLT/5wdPtip7l3
NSn2Pn1d8rB32BNppZ1s3/Esv0G1oL4tUqDxBztXl7KmvZcz1qs+Q4IM640cIeGE
VAmIQsMkvrLOV43Go9rcV16w4/pZoi2SKj6yN3LGGau+D9WbpKsFXtwj1kCi4euL
KCMrBrQ6tj5KxpKaElK0oUX8DJohDVts6HNU81zQiCl3TEIAAmKLfnSp87dX1Cjg
ab3eCVjXLqWqbE+PAW0NVdHoL8qRcNXADBhmTx5Invpz2Ha1GIBW1tv5hNKM7DLD
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 197971430507990016504766699004736221831010128696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Europe SSL CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-05 11:54:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 12:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksdienst voor Jaarlijkse Vakantie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'onva-rjv.fgov.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27582698523657998024754582178333319272132243092569376973277668417353960332836876237384080777620825235191485204975666753950803780226903025335191594621212714501958494599888477106877078290979638151796291976771253653625525852594417456133244651890951248789473647118921681372365823687076911199567460231791584350544975838891627701278222752483960761177253869171513402709131763999533831271274635711654876944853347532738609003425002636168382149546943700208493220068956149275755990430804546327735555393026569644940685030669726221783825035659169166410929465571606290913113146460701516081960992431000731334267718509176712607220653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2fad64aacf290d30dacb443e3fd64fba1a9ff178
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadiseuropesslcag2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (502 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onva-rjv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onva-rjv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onva.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lju.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onva-rjv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjv-onva.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjv-onva.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onva.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lju.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meinurlaubsgeld.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meinurlaubskonto.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mijnvakantiegeld.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mijnvakantierekening.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moncomptedevacances.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monpeculedevacances.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onva.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lju.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onva-rjv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjv-onva.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinurlaubsgeld.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinurlaubskonto.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnvakantiegeld.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnvakantierekening.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncomptedevacances.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monpeculedevacances.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadiseuropesslcag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70c209390454c7bb107fbd49e937c028702944b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006cab8fa3793c0e5e811c9d58a2cfaa111f95c5a9725215ac8cfbeb995f20b6988a74e04fef3defe23ef23e59eee87b6746de8aeb2c71479c53ae9391965a1ef48517e8b6eff693f31921bf559159de7b6f1cdaa0f676a4364c81229a382b5cef4a3c2ae710ba42f9bd24cdffcf01095178e8f71b18563f1efcc7d5aace951dfce4d7322789c144587ae0ed771f7e73e977302ab7a2b496805a68f630f5cbdface12107d4db42f91baa9f243b80a386bf8668b91367e6f1ca72ddd9bdf2c20f16c3f4b9300f55d5b5e25ed51f040d2dfffc4999093fcadcb5521fe7ffd4ead2d467f27dbb8e9aa68ca398e88c224c55764f3455a7c29e2aa4afc8d9727c68758b8bb18bdce1f36180c330009436991808880dddfe2098a92f344d8d4479733d6ccd9b7609a5fbd6522de75638c34d636ea62cd3582615fb0ff2a344a9b6f44383b62e50f17f60850728d515400b6577144420a30617f864a5431bf1306f36d518b6e40f1fd0fe2edb63ba02898a9c93213856e8abfa0cdab965a48bfd3485af14b378351620fb1ca09026b0f99cefd88593cd2950d84e826b8ce4d8e37468ecd38142afe20bbb79b93682329dbad62d1ef66a2e8c5a0e964c185e7515fa53446cffbcc1d77c4b1acdb041755b7f505fd9219598580cafc5b9029d04b0692321c0dbf999bed8a3b49f52c1cb5b63f50625ce60365593facadfafe040557b4265f2