reflektis.com

- Reflektis -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 8c:20:28:cc:e0:2f:30:f6:f7:df:67:cb:ed:72:08:9c was issued on by Sectigo Limited.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Reflektis

Organization: Reflektis
Organization unit: Reflektis
Address: Torenstraat 12
Postal code: 9988SP
State / Province: Groningen
Locality: Usquert
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8c:20:28:cc:e0:2f:30:f6:f7:df:67:cb:ed:72:08:9c
Serial Number (int): 186258900437672328610242302908617066652
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 95:30:1a:09:79:1f:1e:11:4f:7f:03:c9:0d:fe:6a:0d:97:9a:36:10
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 4d:93:c0:4b:4c:6d:7d:d8:55:fe:93:b9:2b:2a:da:52:aa:36:36:3d
Fingerprint (sha256): 5d:34:22:b6:c7:ea:7c:1e:03:bb:7a:63:7a:6d:e2:50:4e:04:7a:9a:2b:c3:a6:42:25:39:d2:7c:fb:f1:1e:1a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate reflektis.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reflektis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reflektis.com
reflektis.nl
reflektis.training
robvens.com
robvens.nl
robvens.st
www.reflektis.com
www.reflektis.nl
www.reflektis.training
www.robvens.com
www.robvens.nl
www.robvens.st

Other certificates including the domain name reflektis.com

(limited to 100 certificates)
payments.inursecoach.com
invoice.redsixdigital.com
app.pawsworldwide.org
ssl255761.cloudflaressl.com
support.plcorp.com
indiahr.lennoxintl.com
payments.inursecoach.com
support.digitalxraid.com
ssl84384.cloudflare.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
portail-client1.dawisey.com
ssl255761.cloudflaressl.com
reflektis.com
www.reflektis.com
books.anyflux.com
payments.inursecoach.com
app.pawsworldwide.org
support.reflektis.com
books.anyflux.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
reflektis.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
reflektis.com
reflektis.com
reflektis.com
payments.inursecoach.com
app.pawsworldwide.org
www.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
books.anyflux.com
app.pawsworldwide.org
payments.inursecoach.com
reflektis.com
support.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
kundencenter.rudolph-itnetworks.de
csmeta.emtholding.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
ssl255761.cloudflaressl.com
support.fastview360.co.uk
app.pawsworldwide.org
support.qubelotto.co.uk
indiahr.lennoxintl.com
support.plcorp.com
indiahr.lennoxintl.com
books.begeleidwonennederland.nl
administratie.stickybandits.nl
payments.inursecoach.com
clients.axeltra.com
customer-creator.zoho.com
payments.inursecoach.com
mon-compte.prezens.fr
payments.inursecoach.com
client.semago.eu
books.anyflux.com
ssl255761.cloudflaressl.com
indiahr.lennoxintl.com
app.pawsworldwide.org
reflektis.com
my.42nerds.com
payments.inursecoach.com
customer-creator.zoho.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
www.reflektis.com
www.reflektis.com
www.reflektis.com
app.pawsworldwide.org
books.parteam.fr
clientaccess.tristella.co.za
invoice.redsixdigital.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
files.drockmeeschter.lu
client.hardingsurveyors.co.uk
indiahr.lennoxintl.com
indiahr.lennoxintl.com
my.exposure-systems.com
ssl255761.cloudflaressl.com
accounts.baglietto.co.uk
indiahr.lennoxintl.com
facture.evocion.fr
reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
app.pawsworldwide.org
customer-creator.zoho.com
reflektis.com
accounts.3bz.co.uk

Certificate

The complete raw certificate details for reflektis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIyjCCB7KgAwIBAgIRAIwgKMzgLzD2999ny+1yCJwwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMDAxMDkwMDAwMDBaFw0yMjAxMDkyMzU5NTlaMIGdMQswCQYD
VQQGEwJOTDEPMA0GA1UEERMGOTk4OFNQMRIwEAYDVQQIEwlHcm9uaW5nZW4xEDAO
BgNVBAcTB1VzcXVlcnQxFzAVBgNVBAkTDlRvcmVuc3RyYWF0IDEyMRIwEAYDVQQK
EwlSZWZsZWt0aXMxEjAQBgNVBAsTCVJlZmxla3RpczEWMBQGA1UEAxMNcmVmbGVr
dGlzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALyVtVX6bSWn
GCUNNLoo6/LW67hxotqjXaD/qD/qsQmihbAXpi+Rc2vWtUXT6gxouUwCvuZJ5+8+
uFAS5Wm+5TCDaj4Izt5VykctQlOA/pdZqOCof5h++NOar5i8I3Zk14D2rRPcIJME
ftbb3TYgAjtSnPGcBG7Ga+krVbruBdQyi/GskNTwk0zp+r/xA4WSzRcG3mzB4c/S
w2p07w2Z0Q9yj2DEG6ouTeF/e4g9QkB0pWnENAS908yEEcADBrgUF9Tx5FEGEJkL
buJSNd/rWx2AsRREV9Biqg/RaDK4dYaWOL1jRz2k80g2mpDsQlQWt9nMLM7uqcon
aMSQ6yi9hEpJqONyVHS6OECcjMvWEySqYJnex9asKlQ9T6yxWonLKCsiaRnGM6Vd
vAMRwX870PHqeFRapo9Mym00mtDa6VkQqIcg+LE2/NXDSV1vQ2Q8wzD++rMtz/uj
ZRqcRIJGUJrfb250X4BBURA5FXifstNUsSA1UpZBbGYAu0hsUcbomSVnXeBQeJg2
FE+kJXkdtDmGZNh6wR76hvIHKjL0BCEHfzwtR9GC3wmOyE9rmK3qaFWarVAbPCrf
gElwTY1VOjbfFj8r4euqm/WskSMxPgF8+c7+wOQ+LVt497zCcujv7wlOZ0GCi3ti
iKUdvKEaixkaw9my14KI0kGHmo2x80sjAgMBAAGjggQJMIIEBTAfBgNVHSMEGDAW
gBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAdBgNVHQ4EFgQUlTAaCXkfHhFPfwPJDf5q
DZeaNhAwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQMEMCUw
IwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBa
BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29S
U0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGKBggr
BgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGlnby5jb20v
U2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5j
cnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIHPBgNVHREE
gccwgcSCDXJlZmxla3Rpcy5jb22CDHJlZmxla3Rpcy5ubIIScmVmbGVrdGlzLnRy
YWluaW5nggtyb2J2ZW5zLmNvbYIKcm9idmVucy5ubIIKcm9idmVucy5zdIIRd3d3
LnJlZmxla3Rpcy5jb22CEHd3dy5yZWZsZWt0aXMubmyCFnd3dy5yZWZsZWt0aXMu
dHJhaW5pbmeCD3d3dy5yb2J2ZW5zLmNvbYIOd3d3LnJvYnZlbnMubmyCDnd3dy5y
b2J2ZW5zLnN0MIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQBGpVXrdfqRIDC1
oolp9PN9ESxBdL79SbiFq/L8cP5tRwAAAW+LCWaqAAAEAwBGMEQCIGbNrWrhSnfD
mYbiBVKVstMcXzvVkSHS/B0ddBcmyuufAiAps5eNApKM0I7OoOxDxgRRRcJIqpKO
u54GOVhBoD4dDAB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAAB
b4sJZpEAAAQDAEcwRQIgBvrjobf+1PnvT1TAyXnE1upYZeV55QG42biNDHF+xtsC
IQDIEYMM7hHvisEbWk7JCcXa20QZ8rgIODL2ORRIlXpgRQB2ACJFRQdZVSRWlj+h
L/H3bYbgIyZjrcBLf13Gg1xu4g8CAAABb4sJZpcAAAQDAEcwRQIgJFKWfXDNcEJR
yFPF1aieFtAcnPDERRZ3M/e/zkCaVLUCIQCZVi/AUpg9fRMh2SmX4XaZnBXGvBHZ
ty28O1gRBqz3IzANBgkqhkiG9w0BAQsFAAOCAQEAbjffObsBngg24cqqtxQAN0CK
8s5DIp4xWycYRkenEABOIWsFEou09DKsN3HUnez2aMIYAhznivVx0PaefhHEyC2v
giDLzOwix2KUd/jcbu1GCF87al1ZCmL/W40iY841BrPhyqHAIZkysvGD+VdppScd
D9FIBjYL44oOV+PJ9ao2TuBwAV+26N+TL7NW/FcbAFUK8W6WKuGS2AzligwlZBsx
lEg+wfjnWLXDlGhjpD1H/cPBGdmf1mjNeoREa6Vy9XG5Y2xCtOoOQ/yPEZzRDf6P
eMFXE8UmfbYwLmpM+tfkgqgy18aH7xlpx4zmEDmKalwNBJwskX3JOEr+y4VHIA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvJW1VfptJacYJQ00uijr
8tbruHGi2qNdoP+oP+qxCaKFsBemL5Fza9a1RdPqDGi5TAK+5knn7z64UBLlab7l
MINqPgjO3lXKRy1CU4D+l1mo4Kh/mH7405qvmLwjdmTXgPatE9wgkwR+1tvdNiAC
O1Kc8ZwEbsZr6StVuu4F1DKL8ayQ1PCTTOn6v/EDhZLNFwbebMHhz9LDanTvDZnR
D3KPYMQbqi5N4X97iD1CQHSlacQ0BL3TzIQRwAMGuBQX1PHkUQYQmQtu4lI13+tb
HYCxFERX0GKqD9FoMrh1hpY4vWNHPaTzSDaakOxCVBa32cwszu6pyidoxJDrKL2E
Skmo43JUdLo4QJyMy9YTJKpgmd7H1qwqVD1PrLFaicsoKyJpGcYzpV28AxHBfzvQ
8ep4VFqmj0zKbTSa0NrpWRCohyD4sTb81cNJXW9DZDzDMP76sy3P+6NlGpxEgkZQ
mt9vbnRfgEFREDkVeJ+y01SxIDVSlkFsZgC7SGxRxuiZJWdd4FB4mDYUT6QleR20
OYZk2HrBHvqG8gcqMvQEIQd/PC1H0YLfCY7IT2uYrepoVZqtUBs8Kt+ASXBNjVU6
Nt8WPyvh66qb9ayRIzE+AXz5zv7A5D4tW3j3vMJy6O/vCU5nQYKLe2KIpR28oRqL
GRrD2bLXgojSQYeajbHzSyMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 186258900437672328610242302908617066652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9988SP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Usquert'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Torenstraat 12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reflektis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reflektis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reflektis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769358853358727151024675134635788970259400072558597580856345135198044743437167677993925349494553334097707289825276094924134995308184972188626857613326718014456762713181170420135690897722810516067343847214283652857046498411452491640114965962619768138277980287203415650308815735172345217028954761633068990532945842098816929801069535577857891694874006633594776563792183800969341246079352458389987935453249028796394361223131557932364558977509456827988205642208039139636613986180733082709329201564974282349332875241027360000845349413757276114146231986223278975542524843072352796858062527942268875132554309070223903644881136659078607381007572452713935138988375086940925140346593058028947173722928248651093917154904630016952048662193864070316930684446673584512402247402173151785747930660904171950872260425934436568415517006028171352033398931920444158877744887443721576061931804563532248788657761506972523734064068254403181279762261352454863747006700112072236922130358038834234819501741668603841530849986824581771879625536971150534624421929713194344964740017879110941080308207656826080437796991213095483205717866520701890663642061140747292114109427594268128708138774077712552768797297140741062296340899472289135523787689596570969766093867811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95301a09791f1e114f7f03c90dfe6a0d979a3610
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflektis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflektis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflektis.training'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflektis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflektis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflektis.training'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.st'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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