digipoort.compaen.nl

- COMPAEN, administraties, belastingen en cursussen B.V. -

Issued by QuoVadis PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 63:a5:89:1d:93:b3:64:03:f3:85:99:2a:46:c8:85:76:10:ff:50:32 was issued on by QuoVadis Trustlink B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMPAEN, administraties, belastingen en cursussen B.V.

Company registration number: 00000003091327410000
Organization: COMPAEN, administraties, belastingen en cursussen B.V.
State / Province: Gelderland
Locality: Duiven
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 63:a5:89:1d:93:b3:64:03:f3:85:99:2a:46:c8:85:76:10:ff:50:32
Serial Number (int): 568881653717006922650512253323815721213957722162
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 7e:16:60:71:96:ca:0f:a9:2c:4c:c1:4b:e5:f7:6f:2c:07:c7:80:0f
AuthorityKeyId: b7:e9:d0:e9:ff:67:0e:d9:9c:0c:07:2e:97:d4:7e:4b:79:78:f4:20

Fingerprint (sha1): e4:aa:26:49:f0:ac:f0:e7:4a:4f:ae:9a:f7:e0:3d:24:8f:66:a2:eb
Fingerprint (sha256): 68:20:de:fd:54:03:b8:76:ef:be:6c:14:9b:0b:4e:5c:bd:a3:52:af:75:76:ce:51:f2:3d:57:5b:b4:6d:28:19

Issuing Certificate URL: http://trust.quovadisglobal.com/pkioserverg3.crt

Revocation information

OCSP Server: http://sl.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/pkioserverg3.crl

Check the revocation status for certificate digipoort.compaen.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digipoort.compaen.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digipoort.compaen.nl

Other certificates including the domain name compaen.nl

(limited to 100 certificates)
compaen.nl
www.evseed.com
compaen.nl
puja.de
compaen.nl
compaen.nl
admin.tapnotion.com
compaen.nl
compaen.nl
compaen.nl
www.oy-brigade.work
compaen.nl
tv.dzqls.tk
compaen.nl
employee.herohousing.org
noteandgo.com
compaen.nl
digipoort.compaen.nl
www.jvandrai.com
www.devops.page
compaen.nl
www.teknogic.com
compaen.nl
compaen.nl
compaen.nl
compaen.nl
greensdiary.jp
tv.dzqls.tk
reviewer.ilearnswe.io
compaen.nl
greensdiary.jp
compaen.nl
compaen.nl
compaen.nl
compaen.nl
hirelogic.app
greensdiary.jp
app.wildorchidwatch.org
mijn.compaen.nl
dev.frieppy.com
app.quitaboletos.com.br
www.nextgatecapital.com
compaen.nl
compaen.nl
www.stukkateur-koch.de
compaen.nl
staging.mccc.app
mijn.compaen.nl
compaen.nl
www.react-timesaver.com
app.wildorchidwatch.org
greensdiary.jp

Certificate

The complete raw certificate details for digipoort.compaen.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHazCCBVOgAwIBAgIUY6WJHZOzZAPzhZkqRsiFdhD/UDIwDQYJKoZIhvcNAQEL
BQAwgYIxCzAJBgNVBAYTAk5MMSAwHgYDVQQKDBdRdW9WYWRpcyBUcnVzdGxpbmsg
Qi5WLjEXMBUGA1UEYQwOTlRSTkwtMzAyMzc0NTkxODA2BgNVBAMML1F1b1ZhZGlz
IFBLSW92ZXJoZWlkIE9yZ2FuaXNhdGllIFNlcnZlciBDQSAtIEczMB4XDTE4MTEx
MjE0NDkzM1oXDTIwMTIwNTAwMDAwMFowgbIxHTAbBgNVBAUTFDAwMDAwMDAzMDkx
MzI3NDEwMDAwMQswCQYDVQQGEwJOTDETMBEGA1UECAwKR2VsZGVybGFuZDEPMA0G
A1UEBwwGRHVpdmVuMT8wPQYDVQQKDDZDT01QQUVOLCBhZG1pbmlzdHJhdGllcywg
YmVsYXN0aW5nZW4gZW4gY3Vyc3Vzc2VuIEIuVi4xHTAbBgNVBAMMFGRpZ2lwb29y
dC5jb21wYWVuLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrLU
woFD2hnghyhjTAELpM4KyZCFCPMXwdT6YEUxa4OfGvwmwnq7guawFSgzgo5JNyqd
JYwIC8VgJIMe/rkn3mF5zgTZ5Bfms1P+TPZUtVeFqauzjp4Zme+Wjoq6IYIWOahF
BLKpQpKNNSsXHQPgxeDa9l5U+WiOBN8r7KJJN/83EJ1N2YyMaxFErMG0cLpNUKHV
auim+jmrv7z4A8pFcU8qcHfppYK8yDT/pJXPiKIJiOjQ8LUGQNWHOboN1Ow7FIph
6Mki3tDn0pK32eB+Ie8QNiRhypHheYeVkhLI8aFtDMq+1Aa3wCS3N6fr39nvonyB
eHI659U/159V/1vNtQIDAQABo4ICpTCCAqEwHwYDVR0jBBgwFoAUt+nQ6f9nDtmc
DAcul9R+S3l49CAwewYIKwYBBQUHAQEEbzBtMDwGCCsGAQUFBzAChjBodHRwOi8v
dHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3BraW9zZXJ2ZXJnMy5jcnQwLQYIKwYB
BQUHMAGGIWh0dHA6Ly9zbC5vY3NwLnF1b3ZhZGlzZ2xvYmFsLmNvbTAfBgNVHREE
GDAWghRkaWdpcG9vcnQuY29tcGFlbi5ubDCCAToGA1UdIASCATEwggEtMIIBHwYK
YIQQAYdrAQIFBjCCAQ8wNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNn
bG9iYWwuY29tL3JlcG9zaXRvcnkwgdYGCCsGAQUFBwICMIHJDIHGUmVsaWFuY2Ug
b24gdGhpcyBjZXJ0aWZpY2F0ZSBieSBhbnkgcGFydHkgYXNzdW1lcyBhY2NlcHRh
bmNlIG9mIHRoZSByZWxldmFudCBRdW9WYWRpcyBDZXJ0aWZpY2F0aW9uIFByYWN0
aWNlIFN0YXRlbWVudCBhbmQgb3RoZXIgZG9jdW1lbnRzIGluIHRoZSBRdW9WYWRp
cyByZXBvc2l0b3J5IChodHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbSkuMAgG
BmeBDAECAjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwPwYDVR0fBDgw
NjA0oDKgMIYuaHR0cDovL2NybC5xdW92YWRpc2dsb2JhbC5jb20vcGtpb3NlcnZl
cmczLmNybDAdBgNVHQ4EFgQUfhZgcZbKD6ksTMFL5fdvLAfHgA8wDgYDVR0PAQH/
BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQAw
cyWF/hAtSlYk8vI33JLGGUcsySp9XG/GK9SOBcfj47UhgXsQLlXBpQ8YWqRZd5fK
i5Bt6XUDhKBTEosFpm2huQcRaKryFmnvTyRXkYUxSEbjjd4AASym1XaCN8EjpGnA
1Qi/Eh3O1CiMJj12//vDHfqlKQvqys32xNa558XqxbQpTK4RNO4T/M4UNarbVAy9
rSXjDRj8nSxtIAiLXRNrc2mPDQElW4DsQ4MKXsnZGJ3+zREoUFbL1xWaUYHhd/BV
DvZfHXquMzWDa/Plvimg+QY40wgfdhNHgp6UBGlzKsf0BciM+1VHHYj6zCrlnN2T
5eXlejho0nnVcWeOHx121Rsq1A2vyJCvqKjaujT7SSg9MU/o89J6Pi8ynvu8/6/z
y9hFXYbBUiD92NLqd3J7JvIju/8mi2z1JJ+e0kAYzSrsMWlGss4Tcm5JHGeTRRQ/
I1X6SlSUY4xXic3niZj+D9DTZvUJV2zSs1V0Zuxuv0jRbRimwWEQ6MXJ1c2Fyvwg
Bg4HYhedHoZeBi/1GBzEgQGj/pG6rEeIiMo9Jy/gbXCtLxMAJuGGPJhnNf2U3745
xWJRsgX+aViba1yiY9vqMyPgIGw2/Atflj6/k9ulHsw23BOcU7yNYZpiuvjggwGW
dq+9fCmw257Cc2EIWpswZ58tQo3mFd0OdOTiLlIt3g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrLUwoFD2hnghyhjTAEL
pM4KyZCFCPMXwdT6YEUxa4OfGvwmwnq7guawFSgzgo5JNyqdJYwIC8VgJIMe/rkn
3mF5zgTZ5Bfms1P+TPZUtVeFqauzjp4Zme+Wjoq6IYIWOahFBLKpQpKNNSsXHQPg
xeDa9l5U+WiOBN8r7KJJN/83EJ1N2YyMaxFErMG0cLpNUKHVauim+jmrv7z4A8pF
cU8qcHfppYK8yDT/pJXPiKIJiOjQ8LUGQNWHOboN1Ow7FIph6Mki3tDn0pK32eB+
Ie8QNiRhypHheYeVkhLI8aFtDMq+1Aa3wCS3N6fr39nvonyBeHI659U/159V/1vN
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 568881653717006922650512253323815721213957722162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-30237459'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 14:49:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-05 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003091327410000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Duiven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'COMPAEN, administraties, belastingen en cursussen B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'digipoort.compaen.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22053649962704240915210924381646769530453172878776194436729059673889608604683364883756131947614961919783199645454833198438723813135912480853349973013233212768193635852011621629427676906113217164532156627731457540689094920218546775007505973729119756868088719584555481343757062742938548605833330268231741957181270910209424537834317630756722090491540275443574026555407122303532884174013683560406660377216669478163191111222834898065364713150067787556905743575329121087251871964465599081223131018156758249362823321101571334722624194234851897195648605943359009873202346225548553593755029703077661478234155670460755535973813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b7e9d0e9ff670ed99c0c072e97d47e4b7978f420
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/pkioserverg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sl.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digipoort.compaen.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository (http://www.quovadisglobal.com).'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/pkioserverg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e16607196ca0fa92c4cc14be5f76f2c07c7800f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0030732585fe102d4a5624f2f237dc92c619472cc92a7d5c6fc62bd48e05c7e3e3b521817b102e55c1a50f185aa4597797ca8b906de9750384a053128b05a66da1b9071168aaf21669ef4f24579185314846e38dde00012ca6d5768237c123a469c0d508bf121dced4288c263d76fffbc31dfaa5290beacacdf6c4d6b9e7c5eac5b4294cae1134ee13fcce1435aadb540cbdad25e30d18fc9d2c6d20088b5d136b73698f0d01255b80ec43830a5ec9d9189dfecd11285056cbd7159a5181e177f0550ef65f1d7aae3335836bf3e5be29a0f90638d3081f761347829e940469732ac7f405c88cfb55471d88facc2ae59cdd93e5e5e57a3868d279d571678e1f1d76d51b2ad40dafc890afa8a8daba34fb49283d314fe8f3d27a3e2f329efbbcffaff3cbd8455d86c15220fdd8d2ea77727b26f223bbff268b6cf5249f9ed24018cd2aec316946b2ce13726e491c679345143f2355fa4a5494638c5789cde78998fe0fd0d366f509576cd2b3557466ec6ebf48d16d18a6c16110e8c5c9d5cd85cafc20060e0762179d1e865e062ff5181cc48101a3fe91baac478888ca3d272fe06d70ad2f130026e1863c986735fd94dfbe39c56251b205fe69589b6b5ca263dbea3323e0206c36fc0b5f963ebf93dba51ecc36dc139c53bc8d619a62baf8e083019676afbd7c29b0db9ec27361085a9b30679f2d428de615dd0e74e4e22e522dde