vpn.wgtn.ac.nz

- Victoria University of Wellington -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 62:91:75:58:29:81:cc:05:95:a7:45:e2:94:34:29:4f:bc:b3:82:ac was issued on by QuoVadis Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Victoria University of Wellington

Organization: Victoria University of Wellington
State / Province: Wellington
Locality: Wellington
Country: NZ

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 62:91:75:58:29:81:cc:05:95:a7:45:e2:94:34:29:4f:bc:b3:82:ac
Serial Number (int): 562724925731997810897761207110354795917315637932
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 36:80:6a:03:83:3e:09:f8:27:35:ca:37:61:a8:50:46:0a:6e:1b:be
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): bd:20:59:c2:f1:24:f0:af:94:84:a8:17:f6:f7:ee:8f:66:c1:8d:a6
Fingerprint (sha256): 67:67:d8:8c:fe:d2:a8:b8:86:2c:9f:46:c1:65:e2:ab:e4:e5:f0:14:97:44:15:50:c9:6c:cb:4a:1c:d8:66:8b

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate vpn.wgtn.ac.nz

3

DNS Names

0

Email Addresses

2

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.wgtn.ac.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.wgtn.ac.nz
vpn.victoria.ac.nz
vpn.vuw.ac.nz
202.36.141.11
202.36.141.13

Other certificates including the domain name wgtn.ac.nz

(limited to 100 certificates)
o2.shared.global.fastly.net
website-status.ametek.com
ecs.wgtn.ac.nz
o2.shared.global.fastly.net
website-status.ametek.com
status.placepay.com
vpn.wgtn.ac.nz
o2.shared.global.fastly.net
pay.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
ojs.victoria.ac.nz
o2.shared.global.fastly.net
*.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
elements.wgtn.ac.nz
go.wgtn.ac.nz
loginb2ctest.wgtn.ac.nz
o2.shared.global.fastly.net
puaha.wgtn.ac.nz
nuku.wgtn.ac.nz
o2.shared.global.fastly.net
status.hykucommons.org
status-preview.wgtn.ac.nz
status.hykucommons.org
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
choose.wgtn.ac.nz
mobilityprint.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
researcharchive.vuw.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
www.wgtn.ac.nz
choose.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
people.wgtn.ac.nz
sms.wgtn.ac.nz
www.wgtn.ac.nz
o2.shared.global.fastly.net
status.hykucommons.org
sms.wgtn.ac.nz
vpn.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
puaha-uat.wgtn.ac.nz
o2.shared.global.fastly.net
printing.wgtn.ac.nz
ecs.wgtn.ac.nz
vpn.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
*.wgtn.ac.nz
o2.shared.global.fastly.net
printing.wgtn.ac.nz
o2.shared.global.fastly.net
ecs.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
starrez-local.wgtn.ac.nz
*.wgtn.ac.nz
sms.wgtn.ac.nz
status.hykucommons.org
o2.shared.global.fastly.net
openaccess.wgtn.ac.nz
status-preview.wgtn.ac.nz
o2.shared.global.fastly.net
vpn.wgtn.ac.nz
website-status.ametek.com
choose.wgtn.ac.nz
o2.shared.global.fastly.net
status.hykucommons.org
status.hykucommons.org
o2.shared.global.fastly.net
status.placepay.com
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net

Certificate

The complete raw certificate details for vpn.wgtn.ac.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHODCCBSCgAwIBAgIUYpF1WCmBzAWVp0XilDQpT7yzgqwwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIxMDEyMDIwMzAx
MFoXDTIyMDEyMDIwNDAwMFowfDELMAkGA1UEBhMCTloxEzARBgNVBAgMCldlbGxp
bmd0b24xEzARBgNVBAcMCldlbGxpbmd0b24xKjAoBgNVBAoMIVZpY3RvcmlhIFVu
aXZlcnNpdHkgb2YgV2VsbGluZ3RvbjEXMBUGA1UEAwwOdnBuLndndG4uYWMubnow
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVYapj+htFn1Ji9f1JRwy
VuyAMbrtOkh1smmmTxnpA7bqIn56fAz/o0IUE6HvgBrmheUBPm484pf3nXpcdM2W
ivnINorfpVhLO/prapXSkq8Exc7LE3HuZ7hVKIYk7B8b5Ao6vcGQso59QcrvBhoQ
bsZEbFNzV6U5eHpxY+rPO+K1vfyx5jlicPOOyiB4JbG/vxvdSJD4SBevPBcNSdRO
VfyGDgeYch9VndBpwCRT0SCkfjkIpv6IRH84zh4DhMImMtstcUF86HLAGcow4P04
mny8eM9Wgn447jO40nvWOET2RMJ5LtNBEU91HVYZCRETvJVz6WQ+CJ1rGDcoKhFP
AgMBAAGjggLfMIIC2zAJBgNVHRMEAjAAMB8GA1UdIwQYMBaAFLMSibWpSzW8FQDw
gOnYeIfxE3x2MHMGCCsGAQUFBwEBBGcwZTA3BggrBgEFBQcwAoYraHR0cDovL3Ry
dXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGczLmNydDAqBggrBgEFBQcwAYYe
aHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29tMEgGA1UdEQRBMD+CDnZwbi53
Z3RuLmFjLm56ghJ2cG4udmljdG9yaWEuYWMubnqCDXZwbi52dXcuYWMubnqHBMok
jQuHBMokjQ0wWwYDVR0gBFQwUjBGBgwrBgEEAb5YAAJkAQEwNjA0BggrBgEFBQcC
ARYoaHR0cDovL3d3dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAIBgZn
gQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMDoGA1UdHwQzMDEw
L6AtoCuGKWh0dHA6Ly9jcmwucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzMuY3Js
MB0GA1UdDgQWBBQ2gGoDgz4J+Cc1yjdhqFBGCm4bvjAOBgNVHQ8BAf8EBAMCBaAw
ggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBByMqx3yJGShDGoToJQodeTjGLGwPr
60vHaPCQYpYG9gAAAXchhrYhAAAEAwBIMEYCIQDwOlZ1NwzSKM4kJn/Z5kUg4XOP
siFIY7widUUtGi+dUgIhAKYrz3J0AAn6+/V+jXfESMZKPbyKqMsrjj/+86ho2g2T
AHYAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAF3IYa2GwAABAMA
RzBFAiA087QKMlG9nestCz2f8Ipys8WH1gnXhovCXdwCCSMLMAIhAM89lXiYDCOz
bVf2txndacrr3uNC6z1NuNlIbxiuFSNGMA0GCSqGSIb3DQEBCwUAA4ICAQCAqCBB
hehNA2ZRDvNN6tJwFqA/pxJ82Oh6Ly6FtJ0OjEfpso6rwMxhX3IGJ5Kozsf6J976
tPsTpWp8sdVVKNCcDHPPuiGOLAFCZTLZl2AaSl9ilg1pJnygvCPvKbw4+ag2l5Ai
n6JBgUXBqCl6GU2VklzxZ7bDlTcPyTcIPWLv3+dmdMMjna0kLKwqcRCEVbMQMrIF
J5UxfDQfnaBhOkAzNU1d9C3LaZWE1MS76CXsTGKvmYw8aubvJNpcHsWvA1SJeCuo
tfTf04eq+y7frPxSFDQr9YPvBQxyu20C6FL7/RyfIBrhXoXWG3HJb34V+vhd/lds
gPW/j2N8+9escKwMmjFnbifDVJ+/Emk4qBSA3gAGBK/MN8qXGDgPDcA9jDLCnuF1
nEBGoEtWZRFZAqKBbiWY4mO1UFpbCMOHaTFUVAI3Bpnu922/IF51Dr7y+8Dd5VN2
F8GWABMREl83pkMYq95Ppy1wGiN5j/dJrIIxrCkK6c5B5gOtkclMpW68IG6MI2/h
mQEwHs46dXT4hQs+MWBbT0uGZtjkt1vjOgjztuH/UwDXhWbICK+dKEBC/RDC+0Bt
waTXWqNJmWKY0zFwaHNJNYuuOMKF64CnrPb0grVfmzxuDqeARnajedMcrDKq1EI0
8V5yGIy9LeRPcQ7A4k2FGk2Je4A77Zy/9sJznQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylWGqY/obRZ9SYvX9SUc
MlbsgDG67TpIdbJppk8Z6QO26iJ+enwM/6NCFBOh74Aa5oXlAT5uPOKX9516XHTN
lor5yDaK36VYSzv6a2qV0pKvBMXOyxNx7me4VSiGJOwfG+QKOr3BkLKOfUHK7wYa
EG7GRGxTc1elOXh6cWPqzzvitb38seY5YnDzjsogeCWxv78b3UiQ+EgXrzwXDUnU
TlX8hg4HmHIfVZ3QacAkU9EgpH45CKb+iER/OM4eA4TCJjLbLXFBfOhywBnKMOD9
OJp8vHjPVoJ+OO4zuNJ71jhE9kTCeS7TQRFPdR1WGQkRE7yVc+lkPgidaxg3KCoR
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 562724925731997810897761207110354795917315637932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-20 20:30:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-20 20:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victoria University of Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn.wgtn.ac.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25542312057842550946083336622871484595925081581261100934936260377909924797620007146659795121434358223321822911946141628459549405888444774655348496970791409557030523364782557770228104936774290303082398965783799534343558528091306269054000898446279133674026240083433773920057753025923073277224558017060671442805372752713621210095348026674329190316846533340908714234222976268783275774505532023320837131473123166613336126731943015226857029319702340658927914112485081170400236636990487116582916747101837107656961512144860960146661087613802699996364020107131301441296167983724158209718127524951780688655022826900582461739343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.wgtn.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.victoria.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.vuw.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '202.36.141.11'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '202.36.141.13'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36806a03833e09f82735ca3761a850460a6e1bbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001772186b6210000040300483046022100f03a5675370cd228ce24267fd9e64520e1738fb2214863bc2275452d1a2f9d52022100a62bcf72740009fafbf57e8d77c448c64a3dbc8aa8cb2b8e3ffef3a868da0d930076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001772186b61b0000040300473045022034f3b40a3251bd9deb2d0b3d9ff08a72b3c587d609d7868bc25ddc0209230b30022100cf3d9578980c23b36d57f6b719dd69caebdee342eb3d4db8d9486f18ae152346
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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