ras.frieslandcampina.com

- FrieslandCampina Nederland BV -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 48:6a:40:76:0a:98:4c:21:61:bd:f0:90:80:cb:bd:2c was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FrieslandCampina Nederland BV

Organization: FrieslandCampina Nederland BV
Organization unit: FrieslandCampina Nederland Holding BV
Organization unit: Enterprise SSL
Address: Stationsplein 4
Postal code: 3818 LE
State / Province: Utrecht
Locality: Amersfoort
Country: NL

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:6a:40:76:0a:98:4c:21:61:bd:f0:90:80:cb:bd:2c
Serial Number (int): 96256106589935411306230486356309294380
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4d:2a:d6:95:1b:14:d3:ff:24:74:1e:90:9f:84:e2:df:f1:fe:bf:e4
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 59:ee:a5:eb:36:17:aa:80:83:b9:41:20:7c:1e:cb:42:bc:e9:26:06
Fingerprint (sha256): 57:fd:04:00:e8:27:9a:a4:ed:85:7d:2e:84:8b:bb:61:9d:67:2b:9c:5f:b3:4b:b0:b1:52:45:b9:a3:8c:1b:cc

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate ras.frieslandcampina.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ras.frieslandcampina.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ras.frieslandcampina.com
www.ras.frieslandcampina.com

Other certificates including the domain name frieslandcampina.com

(limited to 100 certificates)
*.frieslandcampina.com
protimebe.frieslandcampina.com
www.frieslandcampina.com
www.frieslandcampina.com
*.frieslandcampina.com
academy.frieslandcampina.com
di1.frieslandcampina.com
academy.frieslandcampina.com
www.frieslandcampina.com
digital.frieslandcampina.com
*.frieslandcampina.com
wifi-emea.frieslandcampina.com
lync-access.frieslandcampina.com
lync-web.frieslandcampina.com
jaarverslag.frieslandcampina.com
*.frieslandcampina.com
frieslandcampina.com
*.frieslandcampina.com
lync-web.frieslandcampina.com
*.frieslandcampina.com
*.frieslandcampina.com
*.frieslandcampina.com
digital.frieslandcampina.com
digitalproductcatalogue.frieslandcampina.com
facilitairbeilen.frieslandcampina.com
apac.ftp.frieslandcampina.com
www.frieslandcampina.com
www.friso.com
protimebe.frieslandcampina.com
ras-apac.frieslandcampina.com
acceptatie.frieslandcampina.com
*.frieslandcampina.com
wifi-guest.frieslandcampina.com
frieslandcampina.com
frieslandcampina.com
www.jaarverslag.frieslandcampina.com
dc.frieslandcampina.com
dc.frieslandcampina.com
forces.frieslandcampina.com
contractor.frieslandcampina.com
www.frieslandcampina.com
melkweb.frieslandcampina.com
digital.staging.frieslandcampina.com
adfs.frieslandcampina.com
owa.frieslandcampina.com
ras-emea.frieslandcampina.com
www.frieslandcampina.com
p86.frieslandcampina.com
academy.frieslandcampina.com
uatfixomatic.frieslandcampina.com
sharefile.frieslandcampina.com
www.frieslandcampina.com
*.frieslandcampina.com
register.frieslandcampina.com
maintenancebeilen.frieslandcampina.com
digital.frieslandcampina.com
melkweb.frieslandcampina.com
dc.frieslandcampina.com
digital.frieslandcampina.com
www.frieslandcampina.com
ai1.frieslandcampina.com
boomip.frieslandcampina.com
academy.frieslandcampina.com
dc.frieslandcampina.com
lync-access.frieslandcampina.com
*.frieslandcampina.com
academy.frieslandcampina.com
www.frieslandcampina.com
*.frieslandcampina.com
frieslandcampina.com
*.frieslandcampina.com
ras-apac.frieslandcampina.com
ras.frieslandcampina.com
ras-test.frieslandcampina.com
academy.frieslandcampina.com
xpress.frieslandcampina.com
access.frieslandcampina.com
serviceportal.frieslandcampina.com
academy.frieslandcampina.com
www.inventory.frieslandcampina.com
*.frieslandcampina.com
emea.ftp.frieslandcampina.com
adfs.frieslandcampina.com
www.campinaopschool.nl
frieslandcampina.com
dc.frieslandcampina.com
privacy.frieslandcampina.com
mx1.frieslandcampina.com
acc-register.frieslandcampina.com
www.frieslandcampina.com
www.frieslandcampina.com
dmsone.frieslandcampina.com
digital.frieslandcampina.com
www.frieslandcampina.com
www.frieslandcampina.com
apac.ftp.frieslandcampina.com
apac.ftp.frieslandcampina.com
uatfixomatic.frieslandcampina.com
digitalworkplace.frieslandcampina.com
www.frieslandcampina.com

Certificate

The complete raw certificate details for ras.frieslandcampina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIQSGpAdgqYTCFhvfCQgMu9LDANBgkqhkiG9w0BAQsFADCB
hjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkRFMRMwEQYDVQQHEwpXaWxtaW5ndG9u
MSQwIgYDVQQKExtDb3Jwb3JhdGlvbiBTZXJ2aWNlIENvbXBhbnkxLzAtBgNVBAMT
JlRydXN0ZWQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSA1MB4XDTE4MDcw
MzAwMDAwMFoXDTIwMDcwMjIzNTk1OVowgfQxCzAJBgNVBAYTAk5MMRAwDgYDVQQR
EwczODE4IExFMRAwDgYDVQQIEwdVdHJlY2h0MRMwEQYDVQQHEwpBbWVyc2Zvb3J0
MRgwFgYDVQQJEw9TdGF0aW9uc3BsZWluIDQxJjAkBgNVBAoTHUZyaWVzbGFuZENh
bXBpbmEgTmVkZXJsYW5kIEJWMS4wLAYDVQQLEyVGcmllc2xhbmRDYW1waW5hIE5l
ZGVybGFuZCBIb2xkaW5nIEJWMRcwFQYDVQQLEw5FbnRlcnByaXNlIFNTTDEhMB8G
A1UEAxMYcmFzLmZyaWVzbGFuZGNhbXBpbmEuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAnBSBtK95+zPaNIMO/XRoNjIKAZdqr8BTw0RghwrLDepH
SkgR7mjbhUQHZ90iBxqrKpHR5ZfA00UrYQ7AUpv/TWW64TDhRlWMGBLEc7jVupPI
eR1T98ON6lgmN2nVvEx5JltH/te2WtVvW1G643gKBw5ROtu5LYF6zk+LjtryNt7E
fx2JB2cwykMTwVQBGkcAp0PpNkm74lzULNx1cVW0fXBsqt3hVYBzt8CtgssN8fz7
foxfY1RWA1msygjd0bsJ465AnAGInmskN3iQzobbpMpniES+NQvv/HjpYYEFUgps
BP0mPb8YvPEKvM+krcy3KYI9odyrFZPU+jyQBa3pFQIDAQABo4IB/TCCAfkwHwYD
VR0jBBgwFoAU8rtV7vyPz9A/FGgalX55DqsXMPQwHQYDVR0OBBYEFE0q1pUbFNP/
JHQekJ+E4t/x/r/kMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBLBgNVHSAERDBCMDYGCysGAQQBsjEB
AgIIMCcwJQYIKwYBBQUHAgEWGWh0dHBzOi8vY3BzLnVzZXJ0cnVzdC5jb20wCAYG
Z4EMAQICMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRydXN0LmNv
bS9UcnVzdGVkU2VjdXJlQ2VydGlmaWNhdGVBdXRob3JpdHk1LmNybDCBggYIKwYB
BQUHAQEEdjB0MEsGCCsGAQUFBzAChj9odHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20v
VHJ1c3RlZFNlY3VyZUNlcnRpZmljYXRlQXV0aG9yaXR5NS5jcnQwJQYIKwYBBQUH
MAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wQQYDVR0RBDowOIIYcmFzLmZy
aWVzbGFuZGNhbXBpbmEuY29tghx3d3cucmFzLmZyaWVzbGFuZGNhbXBpbmEuY29t
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBybY/6YK8
AhHIwZLHqco7F7sitkaB2ZxWKFepaCf5ld4k/txn34qmS/xkTSyUDy91umhcXWZv
ikMiVKd88uUgMQH019/uzY80sFvjvV/i2Iv+YiDTD6fC2H9hakc/QHtXdKY0AKIt
zp25elXilYOCW1Rt/bYLpNFSOC+Syk1cfRdN/hNp62KsQMJenS4Urq2hvBLVKAhj
64K7584OqovOt9EXGiB7CORxn7RXOvV50CImpEVkhkJzFQoYfXm8UcRFI+4woM5r
bAajZ9unzhJ+G4Em6TALOBAIFPkx62NikfYJHdP9dSyyX4sQ18mE7xwmU2GIfdbF
aHWKM15rnUnY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBSBtK95+zPaNIMO/XRo
NjIKAZdqr8BTw0RghwrLDepHSkgR7mjbhUQHZ90iBxqrKpHR5ZfA00UrYQ7AUpv/
TWW64TDhRlWMGBLEc7jVupPIeR1T98ON6lgmN2nVvEx5JltH/te2WtVvW1G643gK
Bw5ROtu5LYF6zk+LjtryNt7Efx2JB2cwykMTwVQBGkcAp0PpNkm74lzULNx1cVW0
fXBsqt3hVYBzt8CtgssN8fz7foxfY1RWA1msygjd0bsJ465AnAGInmskN3iQzobb
pMpniES+NQvv/HjpYYEFUgpsBP0mPb8YvPEKvM+krcy3KYI9odyrFZPU+jyQBa3p
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96256106589935411306230486356309294380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3818 LE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amersfoort'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stationsplein 4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FrieslandCampina Nederland BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FrieslandCampina Nederland Holding BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ras.frieslandcampina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19703287787261381298211840413647228260420987901562190779353832804308044059157011023073520515059986928010423195024815329095614325569871480803486983985626577764523901312008526907402218234733744878649946336545181473778214265869941145854499700838571707396179095295416026117175611875930742112692361937497370010914349526197314151499770929270242912540006440982414895413239284864682295513251205265228786955768146922481710604893070632738932461368193340420675104032989816957839557915214516380727761123855796199049790675939114782883890723205238058650488728391319877445245231869364479014764196945722477630566024239765162570934549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d2ad6951b14d3ff24741e909f84e2dff1febfe4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.frieslandcampina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ras.frieslandcampina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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