*.fifa.org

- Federation Internationale de Football Association (FIFA) -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 2a:78:94:b2:7b:0b:a5:76:8b:c8:d3:6f:a6:a4:b5:2a:b9:18:d2:60 was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federation Internationale de Football Association (FIFA)

Organization: Federation Internationale de Football Association (FIFA)
State / Province: Zurich
Locality: Zurich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:78:94:b2:7b:0b:a5:76:8b:c8:d3:6f:a6:a4:b5:2a:b9:18:d2:60
Serial Number (int): 242466655150559661975084040565947664956669874784
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 48:75:5c:5f:24:eb:c1:1e:ff:f8:b5:69:8a:ae:81:cb:f0:53:6f:3c
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): d9:c3:2f:c2:15:01:bf:ab:8d:cb:2b:d8:03:36:94:b5:40:ef:f1:9e
Fingerprint (sha256): 67:2e:08:6c:15:5e:5d:4d:56:3d:34:ff:9e:3c:a0:d5:e7:42:3c:bb:f9:a1:fa:61:30:fc:cc:85:aa:f9:55:fe

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate *.fifa.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fifa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fifa.org
fifa.org

Other certificates including the domain name fifa.org

(limited to 100 certificates)
mi.fifa.org
cargo.fifa.org
mail.fifa.org
*.xtm-intl.com
querydb.fifa.org
webmail.fifa.org
sip.fifa.org
sts.fifa.org
sentry.fifa.org
*.fifa.org
owa.fifa.org
*.ifes-uat.fifa.org
sentry2.fifa.org
*.fifa.org
sts.fifa.org
reg.fifa.org
cargo.fifa.org
sam.fifa.org
portal.fifa.org
*.fifa.org
eptest.fifa.org
survey.fifa.org
portal.fifa.org
fqp.fifa.org
login-dev.fifa.org
survey.fifa.org
survey.fifa.org
*.fifa.org
*.fifa.org
webmaillight.fifa.org
survey.fifa.org
mi.fifa.org
sentry2.fifa.org
turftender.fifa.org
reg.fifa.org
tmscms.fifa.org
webmaillight.fifa.org
share.fifa.org
forward.fifa.org
survey.fifa.org
portal.fifa.org
mi.fifa.org
survey.fifa.org
querydb.fifa.org
survey.fifa.org
survey.fifa.org
translation.fifa.org
*.apps-u.fifa.org
turfmaintenance.fifa.org
testforward.fifa.org
*.ifes2-ibm.fifa.org
reg.fifa.org
sts.fifa.org
owalight.fifa.org
cargo.fifa.org
translation-request.fifa.org
epuat.fifa.org
*.fifa.org
tmscms.fifa.org
guest.fifa.org
*.ifes2-dev.fifa.org
survey.fifa.org
mail.fifa.org
*.fifa.org
webmail.fifa.org
tmscms.fifa.org
survey.fifa.org
legal-backoffice.fifa.org
apps.fifa.org
portal.fifa.org
sts.fifa.org
match.fifa.org
input.fifa.org
*.apps-u.fifa.org
mail.fifa.org
reg.fifa.org
translation-uat.fifa.org
*.xtm-intl.com
ifes2-prd.fifa.org
sni.cloudflaressl.com
turfmaintenance.fifa.org
querydb.fifa.org
match.fifa.org
accreditation.fifa.org
tmscms.fifa.org
*.fifa.org
sip.fifa.org
*.ifes2-tst.fifa.org
pmkt.fifa.org
sip.fifa.org
*.fifa.org
turfmaintenance.fifa.org
survey.fifa.org
*.xtm-intl.com
webmaillight.fifa.org
*.ifes2.fifa.org
tfs.fifa.org
webmail.fifa.org
survey.fifa.org
*.ifes2-uatrc.fifa.org

Certificate

The complete raw certificate details for *.fifa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUKniUsnsLpXaLyNNvpqS1KrkY0mAwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTIyMTIyMTE2MjEy
NloXDTIzMTIyMTE2MTYwMFowgYcxCzAJBgNVBAYTAkNIMQ8wDQYDVQQIDAZadXJp
Y2gxDzANBgNVBAcMBlp1cmljaDFBMD8GA1UECgw4RmVkZXJhdGlvbiBJbnRlcm5h
dGlvbmFsZSBkZSBGb290YmFsbCBBc3NvY2lhdGlvbiAoRklGQSkxEzARBgNVBAMM
CiouZmlmYS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnbx5
zJNftpUBCTf79R+Va1Mj6wVwgDnsSufZY59fwuz52xlnWSya/9FSTgnwBlO8nNU5
E2rauar5OJbnG8nyc2v8jBdIlaJXzAVhwM3hff9SEgJ91gei8y/ZrULelbJaqWK3
GAQYaLswI5+HXbDG9EvA3l9/oUcaO07jVPRhpfqUqoa40QlXdciKhwsGaJy6KebJ
r84UnjNM5TyGOWbty6HalrIcL8ySE344HliPdOP5qZpkxED4LNa7uw/LQB1lZ/JV
yO+eZZMHFDgAj0qziiqy1+lcjkRHl8UW+ho+vh4IaATZgUNehfDt64QylANMitjF
WJuOd6YL+0r1c8VRAgMBAAGjggOnMIIDozAJBgNVHRMEAjAAMB8GA1UdIwQYMBaA
FJEZYq1bF6cw+/DeOSWxvYy5uFEnMHMGCCsGAQUFBwEBBGcwZTA3BggrBgEFBQcw
AoYraHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGcyLmNydDAq
BggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29tMB8GA1Ud
EQQYMBaCCiouZmlmYS5vcmeCCGZpZmEub3JnMFsGA1UdIARUMFIwRgYMKwYBBAG+
WAACZAEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwu
Y29tL3JlcG9zaXRvcnkwCAYGZ4EMAQICMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr
BgEFBQcDATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xv
YmFsLmNvbS9xdnNzbGcyLmNybDAdBgNVHQ4EFgQUSHVcXyTrwR7/+LVpiq6By/BT
bzwwDgYDVR0PAQH/BAQDAgWgMIIB9gYKKwYBBAHWeQIEAgSCAeYEggHiAeAAdwB6
MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYU1hoe7AAAEAwBIMEYC
IQCX3YKsyiB2xPgDcjRx7REhMAE1JmlH6nuNXS10YdHsCgIhAPpKmMYBRcz/98uT
H8s507euWeUN6tVHaSH/lQp+Bn6yAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp
Bo2yCJo32RMAAAGFNYaIcgAABAMARzBFAiBacOFWlNRVr89MmjOE7xv+LOZ+9IWC
4I4UtgDeOMPO2gIhAMKTHCL3Gffeu/pwOvgIwd5k+eLsm8jzWKruMVZCRkInAHUA
6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGFNYaHewAABAMARjBE
AiA00gUaRuQ4402HDw4BTHjt7kbjiaLJe0KQqhq6J21AmwIgKY+tSJr/WD6NuRI+
63ZdRPVGDY4p/yU9dAS6mSNGIB4AdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTK
hYY069yCigAAAYU1hodWAAAEAwBHMEUCIEynfCrM0Olp/fqNXzpZpwM87e+xp17R
+//1qaKIO/RHAiEAmXGU1wun9ZnnnobuBLQLK6xAEP55BwD0CJ5hNrdXWqwwDQYJ
KoZIhvcNAQELBQADggEBAL9+Dwj/7Ci1qcpMZmsaepTBfD5tnThnzIvSwnF7Kxmh
qEfztczSPzkv1Ev2D4Hze3RYLDtREv6ZXcca9BAAJNKIudMr05DnvHfyK3F40QT3
EprMSHPb+qn4ZzszgIO3l88Jp/0zFFKpwpTPWegaYWMg4X2Wc0m+RGBXgxwXzGn5
BV9apZRaxmlQ80VVm9wbJ6sHBzcyv2oV4lbgfe5S1MnG+izpKnKhdbhEWCHlJj8e
W2tmR77qyTLOC1YQARWzhgnwEiDGJyj4Ugfj+jPFSJteNxwgma8pXD6wpJsqgeUs
tNO7D38Xh9yKfZ4Uj1Vr64tEWkPCwO2IlBNUNcZJyCo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp28ecyTX7aVAQk3+/Uf
lWtTI+sFcIA57Ern2WOfX8Ls+dsZZ1ksmv/RUk4J8AZTvJzVORNq2rmq+TiW5xvJ
8nNr/IwXSJWiV8wFYcDN4X3/UhICfdYHovMv2a1C3pWyWqlitxgEGGi7MCOfh12w
xvRLwN5ff6FHGjtO41T0YaX6lKqGuNEJV3XIiocLBmicuinmya/OFJ4zTOU8hjlm
7cuh2payHC/MkhN+OB5Yj3Tj+amaZMRA+CzWu7sPy0AdZWfyVcjvnmWTBxQ4AI9K
s4oqstfpXI5ER5fFFvoaPr4eCGgE2YFDXoXw7euEMpQDTIrYxVibjnemC/tK9XPF
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 242466655150559661975084040565947664956669874784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 16:21:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 16:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federation Internationale de Football Association (FIFA)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fifa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24568013799156276731814246029654233265540474839973446091046379065594413930875597463252707861724179980452827124605058449937233128513194331104589325425611697533656508793492381124183724901412527383108847226712659534854692214186490792805566268723556864115530355271598556352198903747797734229189122881139642021178121925841073965347412701871214125379044660271260913254107154535958436838204223779377875710590922844548897484305706631551512727692588597235337592259098972925314257422870200506136123662299425012399095035121223511118881607219232634861636485526257043285522100920030631193873707961593812958665982637181139948914001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fifa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48755c5f24ebc11efff8b5698aae81cbf0536f3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185358687bb000004030048304602210097dd82acca2076c4f803723471ed1121300135266947ea7b8d5d2d7461d1ec0a022100fa4a98c60145ccfff7cb931fcb39d3b7ae59e50dead5476921ff950a7e067eb20076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000018535868872000004030047304502205a70e15694d455afcf4c9a3384ef1bfe2ce67ef48582e08e14b600de38c3ceda022100c2931c22f719f7debbfa703af808c1de64f9e2ec9bc8f358aaee315642464227007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001853586877b0000040300463044022034d2051a46e438e34d870f0e014c78edee46e389a2c97b4290aa1aba276d409b0220298fad489aff583e8db9123eeb765d44f5460d8e29ff253d7404ba992346201e007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018535868756000004030047304502204ca77c2accd0e969fdfa8d5f3a59a7033cedefb1a75ed1fbfff5a9a2883bf447022100997194d70ba7f599e79e86ee04b40b2bac4010fe790700f4089e6136b7575aac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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