www.mst.nl

Issued by QuoVadis CSP - PKI Overheid CA - G2

About this certificate


This digital certificate with serial number 79:0b:4e:04:33:d8:32:2a:f0:a3:6f:50:35:0b:ec:c9:3c:66:c9:25 was issued on by QuoVadis Trustlink BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Stichting Medisch Spectrum Twente

Company registration number: 00000003140297220000
Organization: Stichting Medisch Spectrum Twente
State / Province: Overijssel
Locality: Enschede
Country: NL

QuoVadis Trustlink BV

Organization: QuoVadis Trustlink BV
Organization unit: Issuing Certification Authority
State / Province: Overijssel
Locality: Enschede
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 79:0b:4e:04:33:d8:32:2a:f0:a3:6f:50:35:0b:ec:c9:3c:66:c9:25
Serial Number (int): 691039987655213745698770816028656063367961037093
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 51:c2:61:30:b6:f8:17:6e:45:3f:27:44:11:c0:ed:80:f4:22:61:3b
AuthorityKeyId: 69:cb:7f:50:76:00:86:53:95:79:12:c1:58:76:1f:13:ef:f2:4d:a3

Fingerprint (sha1): 0c:ba:3e:7d:a0:51:3d:27:8d:82:cd:50:dc:c2:ab:33:75:5c:e1:fe
Fingerprint (sha256): 70:02:7b:03:84:71:a9:84:86:a4:c7:8f:09:6c:68:0a:3e:62:02:ed:0a:dc:5e:f4:db:38:51:8c:6a:ae:e6:21

Issuing Certificate URL: http://trust.quovadisglobal.com/qvocag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvocag2.crl

Check the revocation status for the current certificate on www.mst.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.mst.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHajCCBVKgAwIBAgIUeQtOBDPYMirwo29QNQvsyTxmySUwDQYJKoZIhvcNAQEL BQAwgYUxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVRdW9WYWRpcyBUcnVzdGxpbmsg QlYxKDAmBgNVBAsMH0lzc3VpbmcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxLDAq BgNVBAMMI1F1b1ZhZGlzIENTUCAtIFBLSSBPdmVyaGVpZCBDQSAtIEcyMB4XDTE0 MDYwMjE0MTM0NFoXDTE3MDYwMjE0MTM0MlowgZUxHTAbBgNVBAUTFDAwMDAwMDAz MTQwMjk3MjIwMDAwMQswCQYDVQQGEwJOTDETMBEGA1UECBMKT3Zlcmlqc3NlbDER MA8GA1UEBxMIRW5zY2hlZGUxKjAoBgNVBAoTIVN0aWNodGluZyBNZWRpc2NoIFNw ZWN0cnVtIFR3ZW50ZTETMBEGA1UEAxMKd3d3Lm1zdC5ubDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAJnuZ8xenr7wFt1Ga1nQQKztnacjXg3e908F3BkT UX4GHxp/qPu6xOSS2aTknBRHgIBjRmOsFUMLvQpNbrR1o/fBl8sncmRHy0PuLH33 bNGfpkbKv3+obzpWRnfc4QWwrpgANargTbMxcM3utlYBzfmv/ZvHgfv0YbwkB/08 6kL+QWITyHmskwHCizQ+0tN/U68YrN2nZNpdBf5p1acg7bjL5KmegUcdqQW+lPy/ 7orQWrIUq4C+H9RCwnFoQlhJRoJ3Z+EmQPFS4cjIpC41jXcORq/Zv04Xu0SRclbd zrqc9V054czBHuSYzcs6gooPeezjQHEYymDVou0dsCXtu9MCAwEAAaOCAr4wggK6 MAwGA1UdEwEB/wQCMAAwggExBgNVHSAEggEoMIIBJDCCASAGCmCEEAGHawECBQYw ggEQMIHXBggrBgEFBQcCAjCByhqBx1JlbGlhbmNlIG9uIHRoaXMgY2VydGlmaWNh dGUgYnkgYW55IHBhcnR5IGFzc3VtZXMgYWNjZXB0YW5jZSBvZiB0aGUgcmVsZXZh bnQgUXVvVmFkaXMgQ2VydGlmaWNhdGlvbiBQcmFjdGljZSBTdGF0ZW1lbnQgYW5k IG90aGVyIGRvY3VtZW50cyBpbiB0aGUgUXVvVmFkaXMgcmVwb3NpdG9yeSAgKGh0 dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tKS4wNAYIKwYBBQUHAgEWKGh0dHA6 Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwVQYDVR0RBE4wTKA+ BgorBgEEAYI3FAIDoDAMLjIuMTYuNTI4LjEuMTAwMy4xLjMuNS4yLjEtMDAwMDAw MDMxNDAyOTcyMjAwMDCCCnd3dy5tc3QubmwwcwYIKwYBBQUHAQEEZzBlMCoGCCsG AQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wNwYIKwYBBQUH MAKGK2h0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXZvY2FnMi5jcnQw DgYDVR0PAQH/BAQDAgOoMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAf BgNVHSMEGDAWgBRpy39QdgCGU5V5EsFYdh8T7/JNozA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdm9jYWcyLmNybDAdBgNV HQ4EFgQUUcJhMLb4F25FPydEEcDtgPQiYTswDQYJKoZIhvcNAQELBQADggIBAKF8 y2i+G3QOktBcTubnqVqrW+vGPABmkV4d+L3zzY0o9nwUBiJgk0kThRsFZuEh0Eed NIRsGKJtIAcD66Y7pg5jopBVILlb9rycYXaARCHu2E8DS/XaC9tgK6bXoF8l07SH NElRo8pbmNU4iI7Q/cC2RmrBAF4u/HLeFa5+ORGMGm9h00iJkOOoaKGFTP0xusIl Fmi1K7CRs3I0mFJ/wBVUpE+CQsABtbDmxhoC6QPiNE8OCW+8iei/kryk7FlZmQQ3 IDqsbevErN0psZe4+8xG44ZwgJHjztCuRAUPssnUWpTgFrEw4/FFQFZLEFNShd0N VqC7ejbFYGhqjvvG6qDEdQ4zoljUkN3a4XdtlWA2ee9SfMmHhOauEDFysqmtc5bV 6Hh0YpOsI8YVH46t4+sUmf+IgqOA5gUAB9ebEOx1tIgcCJXMgfe8m+QwUpdPg0ag bZxYk6Ud8afMSmAhEl0go6SUmcGbL4uHsyZWIrazCmNQ82+qoGWWF4cY2KfPBDh5 GpNgpbEjSwoQNdWS10KtLxhEOM/03m+k4zpIlKG15/zi8Vwjp2M4uv9dVQn+erTo R6QIfdSx5A72c643pIiE8o82cRZLg2VmngAmn4wc/4vOAtvQwrPc4Q5gopnPitdf fjKQFGYyVrtroHTPGVQO9weFjMc2KerQcN2ww38s -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme5nzF6evvAW3UZrWdBA rO2dpyNeDd73TwXcGRNRfgYfGn+o+7rE5JLZpOScFEeAgGNGY6wVQwu9Ck1utHWj 98GXyydyZEfLQ+4sffds0Z+mRsq/f6hvOlZGd9zhBbCumAA1quBNszFwze62VgHN +a/9m8eB+/RhvCQH/TzqQv5BYhPIeayTAcKLND7S039Trxis3adk2l0F/mnVpyDt uMvkqZ6BRx2pBb6U/L/uitBashSrgL4f1ELCcWhCWElGgndn4SZA8VLhyMikLjWN dw5Gr9m/The7RJFyVt3Oupz1XTnhzMEe5JjNyzqCig957ONAcRjKYNWi7R2wJe27 0wIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 691039987655213745698770816028656063367961037093 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Issuing Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis CSP - PKI Overheid CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-02 14:13:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-02 14:13:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003140297220000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Overijssel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enschede' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Medisch Spectrum Twente' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mst.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19432022774809321561437317868233829733340606266024826077018041786907998076281062243948054004711049172190884899911243172608774344448424982440273264564887417674984158083011607929144067637681015944374302265271406665019210305367980742089387748611627984302798037314151799515757171785182134865596377992663889772169059671498404445342349610733345663118189239667043234147793221334515716341888230895230743746307108879727270446914704229278536309636180301178366996955562079100506277412659179790221223840410723319749821297159369818463951185597748630229764386219683347359065292471305718451232324007693259689967367635247124865465299 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (296 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 108 105 97 110 99 101 32 111 110 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 98 121 32 97 110 121 32 112 97 114 116 121 32 97 115 115 117 109 101 115 32 97 99 99 101 112 116 97 110 99 101 32 111 102 32 116 104 101 32 114 101 108 101 118 97 110 116 32 81 117 111 86 97 100 105 115 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 97 110 100 32 111 116 104 101 114 32 100 111 99 117 109 101 110 116 115 32 105 110 32 116 104 101 32 81 117 111 86 97 100 105 115 32 114 101 112 111 115 105 116 111 114 121 32 32 40 104 116 116 112 58 47 47 119 119 119 46 113 117 111 118 97 100 105 115 103 108 111 98 97 108 46 99 111 109 41 46] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.2.1-00000003140297220000' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mst.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvocag2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 69cb7f5076008653957912c158761f13eff24da3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvocag2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 51c26130b6f8176e453f274411c0ed80f422613b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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