loket.at-ez.nl

Issued by QuoVadis CSP - PKI Overheid CA - G2

About this certificate


This digital certificate with serial number 61:3a:ea:4d:b9:5f:df:10:57:3c:51:fc:3e:a5:1f:cb:cf:32:35:1a was issued on by QuoVadis Trustlink BV .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

ministerie van Economische Zaken

Company registration number: 00000004000000010000
Organization: ministerie van Economische Zaken
Organization unit: Agentschap Telecom
State / Province: Zuid-Holland
Locality: Den Haag
Country: NL

QuoVadis Trustlink BV

Organization: QuoVadis Trustlink BV
Organization unit: Issuing Certification Authority
State / Province: Zuid-Holland
Locality: Den Haag
Country: NL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 61:3a:ea:4d:b9:5f:df:10:57:3c:51:fc:3e:a5:1f:cb:cf:32:35:1a
Serial Number (int): 555085958714482466496561602709607294717154964762
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 81:57:03:33:31:6f:bc:6d:cc:2c:46:27:35:36:2a:f9:b3:c8:ec:52
AuthorityKeyId: 69:cb:7f:50:76:00:86:53:95:79:12:c1:58:76:1f:13:ef:f2:4d:a3

Fingerprint (sha1): b5:a8:e6:8c:6f:80:2b:fd:94:98:89:45:82:67:ff:c7:44:a4:29:7c
Fingerprint (sha256): 1c:eb:06:cb:81:c8:91:1e:33:46:bc:4a:a5:d3:61:62:e7:c8:f0:0c:e1:a2:1f:46:4d:3f:03:52:d8:7f:00:f8

Issuing Certificate URL: http://trust.quovadisglobal.com/qvocag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvocag2.crl

Check the revocation status for the current certificate on loket.at-ez.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: loket.at-ez.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHkDCCBXigAwIBAgIUYTrqTblf3xBXPFH8PqUfy88yNRowDQYJKoZIhvcNAQEL BQAwgYUxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVRdW9WYWRpcyBUcnVzdGxpbmsg QlYxKDAmBgNVBAsMH0lzc3VpbmcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxLDAq BgNVBAMMI1F1b1ZhZGlzIENTUCAtIFBLSSBPdmVyaGVpZCBDQSAtIEcyMB4XDTE0 MDIwMzA4MTI0OVoXDTE1MDIwMzA4MTIzOVowgbcxHTAbBgNVBAUTFDAwMDAwMDA0 MDAwMDAwMDEwMDAwMQswCQYDVQQGEwJOTDEVMBMGA1UECBMMWnVpZC1Ib2xsYW5k MREwDwYDVQQHEwhEZW4gSGFhZzEpMCcGA1UEChMgbWluaXN0ZXJpZSB2YW4gRWNv bm9taXNjaGUgWmFrZW4xGzAZBgNVBAsTEkFnZW50c2NoYXAgVGVsZWNvbTEXMBUG A1UEAxMObG9rZXQuYXQtZXoubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDaUcagIyGi9nVBIGlyB4gMSpizE4TneP5DKbByGPaA4hJDW1Jr01mwPEff E8LDiatIoN7bDTY38GPeMJLOjpjjgw6KOOBww+gi3uAsOTnU+EkWF1UIc7RB6qhc a8S8w44pNL5BKN6HM8FDGYcyKEPERGVCA+hTxF1FTQ2HPfO9APVH4sdqyDupIe1u WSPFJHAnD2EzumAafK+b/o4tIzoUQXZ+NLSdQfo/a+IIh1PIEOAReZVjIExLuf34 DsaCdJBotK1VUrQkrQfUmDoo+AjXDsxgEtKbUUw9CGNaFMttMMMLTSU9R88nOyPc FMa7B1abnzty3ll52etFGxfyxi4LAgMBAAGjggLCMIICvjAMBgNVHRMBAf8EAjAA MIIBMQYDVR0gBIIBKDCCASQwggEgBgpghBABh2sBAgUGMIIBEDCB1wYIKwYBBQUH AgIwgcoagcdSZWxpYW5jZSBvbiB0aGlzIGNlcnRpZmljYXRlIGJ5IGFueSBwYXJ0 eSBhc3N1bWVzIGFjY2VwdGFuY2Ugb2YgdGhlIHJlbGV2YW50IFF1b1ZhZGlzIENl cnRpZmljYXRpb24gUHJhY3RpY2UgU3RhdGVtZW50IGFuZCBvdGhlciBkb2N1bWVu dHMgaW4gdGhlIFF1b1ZhZGlzIHJlcG9zaXRvcnkgIChodHRwOi8vd3d3LnF1b3Zh ZGlzZ2xvYmFsLmNvbSkuMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3ZhZGlz Z2xvYmFsLmNvbS9yZXBvc2l0b3J5MFkGA1UdEQRSMFCgPgYKKwYBBAGCNxQCA6Aw DC4yLjE2LjUyOC4xLjEwMDMuMS4zLjUuMi4xLTAwMDAwMDA0MDAwMDAwMDEwMDAw gg5sb2tldC5hdC1lei5ubDBzBggrBgEFBQcBAQRnMGUwKgYIKwYBBQUHMAGGHmh0 dHA6Ly9vY3NwLnF1b3ZhZGlzZ2xvYmFsLmNvbTA3BggrBgEFBQcwAoYraHR0cDov L3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdm9jYWcyLmNydDAOBgNVHQ8BAf8E BAMCA6gwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaA FGnLf1B2AIZTlXkSwVh2HxPv8k2jMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9j cmwucXVvdmFkaXNnbG9iYWwuY29tL3F2b2NhZzIuY3JsMB0GA1UdDgQWBBSBVwMz MW+8bcwsRic1Nir5s8jsUjANBgkqhkiG9w0BAQsFAAOCAgEAH6BCBNQq0E0ZF6Ki 9iOKmlEjuhG0FBUHMcmKH3QH6hVVHAS/YyWbIyR0DVbyUfsKK5WxX2th3Ci6/pYa AyGmB4Qu5DYJtFqDLhD1UAcSWrtw0pJKt9azIb7e+92FGmgZDDUXpefmkGm4XNQF JeH+E2vEusjpJ3HDBmIsrKGsyd8U7orUmKUJhNll3DerSx6TOQJ8dIiscICogMlq s8yyxDqUwKrxo1/9cwqJOLs2bUXPyg2ip5fBlErNEEVu66OzdLDhr8Kop44LjAtf mGOUDx4kQzG0vbXs0sQNxyAXrP77C93ECdWpo8MLTDmxg9GTtmvIC2czfgmi3j61 x7Ws0UlgDFOXLPc3Tr/KMyjcV79mTtiddnwm4598XNDI1i2hx5r/hJj03mM12or0 QYwv1azUdzRtIOjpmunRQFeE8jBcJDkGX247yid5GFgT7rxG2FitZnNu8jWJmnPH A9+w6odEtO2UHXxu4BENaZQ2VNI/BSTKduNMA6fHHLrMkxfL6DYKmUnnpwt11AeJ mCsbNcu5zR1oGGyDGwUfw4KKLQUoH+QGCVuCzfJhZxRinATxXyUy+EalHoXyi2+5 ZzTypQq5uKJzSqJiFkgcBIq3mKT69jsjcc3DEl9myBKUl8utim+EaY2Uget5Xq9R QExjbhJmBaT2EpKT9qjhpHOpnsQ= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lHGoCMhovZ1QSBpcgeI DEqYsxOE53j+Qymwchj2gOISQ1tSa9NZsDxH3xPCw4mrSKDe2w02N/Bj3jCSzo6Y 44MOijjgcMPoIt7gLDk51PhJFhdVCHO0QeqoXGvEvMOOKTS+QSjehzPBQxmHMihD xERlQgPoU8RdRU0Nhz3zvQD1R+LHasg7qSHtblkjxSRwJw9hM7pgGnyvm/6OLSM6 FEF2fjS0nUH6P2viCIdTyBDgEXmVYyBMS7n9+A7GgnSQaLStVVK0JK0H1Jg6KPgI 1w7MYBLSm1FMPQhjWhTLbTDDC00lPUfPJzsj3BTGuwdWm587ct5ZednrRRsX8sYu CwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 555085958714482466496561602709607294717154964762 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Issuing Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis CSP - PKI Overheid CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-03 08:12:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-03 08:12:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000004000000010000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Den Haag' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ministerie van Economische Zaken' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Agentschap Telecom' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loket.at-ez.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27560275672462408347219786894482765980956867332304236171972686842402018948980181006447539611648131518862337987799643851684596059147253522863855852276324462844435064473355453539333526955331879877297679773540016317417613998891815278725960522826837589467731271332050418621583292720543829564756891819122134781960222769003366514233986230690232509138161083727091764645604440158655847499469848518410413573311343888367110802185559377374824629750663304908359649253997738757255388541868027146871043165579068579507720917099874651185543448503805408732346758364328242172678559542858063389760533601278975825397466382901935337778699 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (296 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 108 105 97 110 99 101 32 111 110 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 98 121 32 97 110 121 32 112 97 114 116 121 32 97 115 115 117 109 101 115 32 97 99 99 101 112 116 97 110 99 101 32 111 102 32 116 104 101 32 114 101 108 101 118 97 110 116 32 81 117 111 86 97 100 105 115 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 97 110 100 32 111 116 104 101 114 32 100 111 99 117 109 101 110 116 115 32 105 110 32 116 104 101 32 81 117 111 86 97 100 105 115 32 114 101 112 111 115 105 116 111 114 121 32 32 40 104 116 116 112 58 47 47 119 119 119 46 113 117 111 118 97 100 105 115 103 108 111 98 97 108 46 99 111 109 41 46] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.2.1-00000004000000010000' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loket.at-ez.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvocag2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 69cb7f5076008653957912c158761f13eff24da3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvocag2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 81570333316fbc6dcc2c462735362af9b3c8ec52 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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