www.p-direkt.nl

Issued by QuoVadis CSP - PKI Overheid CA - G2

About this certificate


This digital certificate with serial number 1d:41:f6:9f:8e:36:4b:76:63:f6:36:a8:8c:ff:ca:5b:49:c0:31:97 was issued on by QuoVadis Trustlink BV .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Dienst Publiek en Communicatie (DPC)

Company registration number: 00000003273659320000
Organization: Dienst Publiek en Communicatie (DPC)
Organization unit: Rijksoverheid
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

QuoVadis Trustlink BV

Organization: QuoVadis Trustlink BV
Organization unit: Issuing Certification Authority
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 1d:41:f6:9f:8e:36:4b:76:63:f6:36:a8:8c:ff:ca:5b:49:c0:31:97
Serial Number (int): 167031764708063680149250809343400167150513566103
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: a6:eb:6a:e6:ce:42:36:ab:71:1b:f1:e8:70:57:81:a4:5d:9e:60:d1
AuthorityKeyId: 69:cb:7f:50:76:00:86:53:95:79:12:c1:58:76:1f:13:ef:f2:4d:a3

Fingerprint (sha1): a4:98:ce:25:3d:45:6f:1d:83:8f:72:0c:c9:cb:0d:4b:55:35:86:1e
Fingerprint (sha256): bd:c3:dc:ff:da:1e:9e:ec:4d:4a:60:4a:ff:2f:82:ac:97:a6:f8:5f:b8:90:d5:72:ab:67:33:5d:74:c8:2e:65

Issuing Certificate URL: http://trust.quovadisglobal.com/qvocag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvocag2.crl

Check the revocation status for the current certificate on www.p-direkt.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.p-direkt.nl
p-direkt.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHozCCBYugAwIBAgIUHUH2n442S3Zj9jaojP/KW0nAMZcwDQYJKoZIhvcNAQEL BQAwgYUxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVRdW9WYWRpcyBUcnVzdGxpbmsg QlYxKDAmBgNVBAsMH0lzc3VpbmcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxLDAq BgNVBAMMI1F1b1ZhZGlzIENTUCAtIFBLSSBPdmVyaGVpZCBDQSAtIEcyMB4XDTE0 MDgyNTA2NTA1N1oXDTE3MDgyNTA2NTA1NVowgbwxHTAbBgNVBAUTFDAwMDAwMDAz MjczNjU5MzIwMDAwMQswCQYDVQQGEwJOTDEVMBMGA1UECBMMWnVpZC1Ib2xsYW5k MRYwFAYDVQQHEw0ncy1HcmF2ZW5oYWdlMS0wKwYDVQQKEyREaWVuc3QgUHVibGll ayBlbiBDb21tdW5pY2F0aWUgKERQQykxFjAUBgNVBAsTDVJpamtzb3ZlcmhlaWQx GDAWBgNVBAMTD3d3dy5wLWRpcmVrdC5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMGsBvis+7e5cbb/wIsLovA0nL6TrZrjjC1Yfk+uQJT0KpAhtWJI u1Sr8ewFKLYzvNQk1YLCSrShY3PLfXCNHqOP+kRFWSGREfuOoMYsGdgtEvCzTSja 0bW0X5vmYYBSik5sVVLa4oaWjrwgZJUSZWXDZ1HF799aDTB5JRgjffbyn/Szt198 QTejirAFsty1aKaTxY0A/8tOCBN04XjbV3shuziLtyzxVmyk0G8u/dUedlomQdM/ WWV3hV1XxEgkHDjh7QjF8KgRgx+BFDfnRiiZPR93b+fun5VnA0DbPE329T2nLBkl AFhHUK7mQ4EX3TDD48t0uHf6cLbQO0HKxKECAwEAAaOCAtAwggLMMAwGA1UdEwEB /wQCMAAwggExBgNVHSAEggEoMIIBJDCCASAGCmCEEAGHawECBQYwggEQMIHXBggr BgEFBQcCAjCByhqBx1JlbGlhbmNlIG9uIHRoaXMgY2VydGlmaWNhdGUgYnkgYW55 IHBhcnR5IGFzc3VtZXMgYWNjZXB0YW5jZSBvZiB0aGUgcmVsZXZhbnQgUXVvVmFk aXMgQ2VydGlmaWNhdGlvbiBQcmFjdGljZSBTdGF0ZW1lbnQgYW5kIG90aGVyIGRv Y3VtZW50cyBpbiB0aGUgUXVvVmFkaXMgcmVwb3NpdG9yeSAgKGh0dHA6Ly93d3cu cXVvdmFkaXNnbG9iYWwuY29tKS4wNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVv dmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwZwYDVR0RBGAwXqA+BgorBgEEAYI3 FAIDoDAMLjIuMTYuNTI4LjEuMTAwMy4xLjMuNS4yLjEtMDAwMDAwMDMyNzM2NTkz MjAwMDCCD3d3dy5wLWRpcmVrdC5ubIILcC1kaXJla3QubmwwcwYIKwYBBQUHAQEE ZzBlMCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20w NwYIKwYBBQUHMAKGK2h0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXZv Y2FnMi5jcnQwDgYDVR0PAQH/BAQDAgOoMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAfBgNVHSMEGDAWgBRpy39QdgCGU5V5EsFYdh8T7/JNozA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdm9jYWcy LmNybDAdBgNVHQ4EFgQUputq5s5CNqtxG/HocFeBpF2eYNEwDQYJKoZIhvcNAQEL BQADggIBAGOX6dO6soG9c0XK6qUKmBp2YE7ssIUXaRIw9yEbqZJfpaS2yI/NbRN4 8ip/YZ392qK32J85ibXYkJ7jqLKcSKLYbd8QmRaGXJgM4ThDZstkUYiBcraaQ1/q 3bGqeTSVHAHPOhuthMBHc8rBDPpb2eJcf9andUAZ/SffPISM8do0EUgEqtZ39hSp NVTCwpRJb0Segh9GPlaax2v61VaiiXE8jFnDh3HR6HZC7+3RCWNUrTDK+lWz6ln/ oa3CVSdHx/9m4zbA2hPXuOMJLSA4GiLPtca6TKezcGMcHkwtH5NeVBh2Lf0ROVLU 4AN1H43i4cCYe88uyb0Cz1HF03YzOGiRElKQaCkULDHeFAxvQbi3QzLpDviP2nlK /a3hjeLImizWOSlt3V/SYAK6BLP9hx0J7vNTAMtScGDkzv2LncYgmMmcz8whRMBn /05pqwnB3Wy/i06VglGIm+9nEXsAEf9we2NCV9fuaIZTfrcCcleUAnkFMW68RCCD nKlN1f43bc7fOvZo7ksrfFkp23QxI4nHztYAjG5SurDR2/CLcuJVr2+u8Dbjvq2i B/53fxtda8P5QzUSijDsQva7+dHA9kD1Nc2VYKyXzmUIJyWo4kCvGylWmlJtHSn1 kpTfQJDTCXh+3Ab9p+7AxuI+tv4V3ELexMtO+GzPASSalW2FDT/N -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwawG+Kz7t7lxtv/Aiwui 8DScvpOtmuOMLVh+T65AlPQqkCG1Yki7VKvx7AUotjO81CTVgsJKtKFjc8t9cI0e o4/6REVZIZER+46gxiwZ2C0S8LNNKNrRtbRfm+ZhgFKKTmxVUtrihpaOvCBklRJl ZcNnUcXv31oNMHklGCN99vKf9LO3X3xBN6OKsAWy3LVoppPFjQD/y04IE3TheNtX eyG7OIu3LPFWbKTQby791R52WiZB0z9ZZXeFXVfESCQcOOHtCMXwqBGDH4EUN+dG KJk9H3dv5+6flWcDQNs8Tfb1PacsGSUAWEdQruZDgRfdMMPjy3S4d/pwttA7QcrE oQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 167031764708063680149250809343400167150513566103 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Issuing Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis CSP - PKI Overheid CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-25 06:50:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-25 06:50:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003273659320000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString ''s-Gravenhage' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dienst Publiek en Communicatie (DPC)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksoverheid' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.p-direkt.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24448822648193289286858909145866764589512520961050265727747655041561255694567816364928469320658105825240987457949363142133896020881420614167482418587496740241200690964477440257439323240008782342867038434093799029373072515885304762919724304687482053618272541551374080324293044765985827103785456020807085967686854765347736397214319628731765922730185596172504763488819682079837821169359925534514907570758880277393234072624968858818170409276130136413733286256727020863399004992995084633675919447325794158724400588950362601978793518211716354017216374505925217324231852725781787337038266399315503544200797862169125713527969 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (296 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 108 105 97 110 99 101 32 111 110 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 98 121 32 97 110 121 32 112 97 114 116 121 32 97 115 115 117 109 101 115 32 97 99 99 101 112 116 97 110 99 101 32 111 102 32 116 104 101 32 114 101 108 101 118 97 110 116 32 81 117 111 86 97 100 105 115 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 97 110 100 32 111 116 104 101 114 32 100 111 99 117 109 101 110 116 115 32 105 110 32 116 104 101 32 81 117 111 86 97 100 105 115 32 114 101 112 111 115 105 116 111 114 121 32 32 40 104 116 116 112 58 47 47 119 119 119 46 113 117 111 118 97 100 105 115 103 108 111 98 97 108 46 99 111 109 41 46] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.2.1-00000003273659320000' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p-direkt.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-direkt.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvocag2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 69cb7f5076008653957912c158761f13eff24da3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvocag2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a6eb6ae6ce4236ab711bf1e8705781a45d9e60d1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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