adfs.rcm.ac.uk
- Royal College of Music -
Issued by QuoVadis Global SSL ICA G2
About this certificate
This digital certificate with serial number 52:f4:0b:7f:73:ca:f2:b0:0b:14:32:66:e9:5f:72:6c:1e:1b:04:e8 was issued on by QuoVadis Limited.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Royal College of Music
Organization:
Royal College of Music
Organization unit: IT
Organization unit: IT
State / Province:
Greater London
Locality: LONDON
Country: GB
Locality: LONDON
Country: GB
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate has expire since
Certificate Details
Serial Number (hex): 52:f4:0b:7f:73:ca:f2:b0:0b:14:32:66:e9:5f:72:6c:1e:1b:04:e8Serial Number (int): 473579626640917147126949284370232673206548497640
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 15:bc:95:d5:66:7d:64:ea:75:10:cf:f2:c8:44:00:90:60:8e:0d:f0
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27
Fingerprint (sha1): 8a:da:b9:fd:23:b1:19:32:76:15:bb:40:49:57:ac:43:ec:91:9e:21
Fingerprint (sha256): 7a:e0:f8:d3:61:59:72:55:27:40:40:11:7b:b0:08:b7:c6:24:24:9b:3b:a4:a4:92:e1:69:7b:f7:9e:41:a0:26
Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl
Check the revocation status for certificate adfs.rcm.ac.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for adfs.rcm.ac.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
adfs.rcm.ac.uk
Other certificates including the domain name rcm.ac.uk
(limited to 100 certificates)
openathensla.rcm.ac.uk
rcm-owa.rcm.ac.uk
muse.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
adfs.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
registration.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
museumcollections.rcm.ac.uk
ext.muse.rcm.ac.uk
fees.rcm.ac.uk
researchonline-uat.rcm.ac.uk
rcm-dc-01.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
*.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
payments.rcm.ac.uk
payments.rcm.ac.uk
openathensla.rcm.ac.uk
ext.muse.rcm.ac.uk
*.rcm.ac.uk
www.boxoffice.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
rcmstream.rcm.ac.uk
rcm-dc-02.rcm.ac.uk
activesync.rcm.ac.uk
mail.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
learn.rcm.ac.uk
rcmstream.rcm.ac.uk
museumcollections.rcm.ac.uk
rcmstream.rcm.ac.uk
activesync.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
rcmmail.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
password.rcm.ac.uk
fees.rcm.ac.uk
activesync.rcm.ac.uk
registration.rcm.ac.uk
museumcollections.rcm.ac.uk
fees.rcm.ac.uk
ext.mysite.rcm.ac.uk
password.rcm.ac.uk
museumcollections.rcm.ac.uk
openathensla.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
password.rcm.ac.uk
openathensla.rcm.ac.uk
learn.rcm.ac.uk
mail.rcm.ac.uk
petergellhorn.rcm.ac.uk
password.rcm.ac.uk
adfs.rcm.ac.uk
ext.mysite.rcm.ac.uk
*.rcm.ac.uk
adfs.rcm.ac.uk
rcmwireless.rcm.ac.uk
rcmldaps.rcm.ac.uk
www.boxoffice.rcm.ac.uk
registration.rcm.ac.uk
researchonline-uat.rcm.ac.uk
learn.rcm.ac.uk
muse.rcm.ac.uk
*.rcm.ac.uk
registration.rcm.ac.uk
password.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
rcm-owa.rcm.ac.uk
muse.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
adfs.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
registration.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
museumcollections.rcm.ac.uk
ext.muse.rcm.ac.uk
fees.rcm.ac.uk
researchonline-uat.rcm.ac.uk
rcm-dc-01.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
*.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
payments.rcm.ac.uk
payments.rcm.ac.uk
openathensla.rcm.ac.uk
ext.muse.rcm.ac.uk
*.rcm.ac.uk
www.boxoffice.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
rcmstream.rcm.ac.uk
rcm-dc-02.rcm.ac.uk
activesync.rcm.ac.uk
mail.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
learn.rcm.ac.uk
rcmstream.rcm.ac.uk
museumcollections.rcm.ac.uk
rcmstream.rcm.ac.uk
activesync.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
rcmmail.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
password.rcm.ac.uk
fees.rcm.ac.uk
activesync.rcm.ac.uk
registration.rcm.ac.uk
museumcollections.rcm.ac.uk
fees.rcm.ac.uk
ext.mysite.rcm.ac.uk
password.rcm.ac.uk
museumcollections.rcm.ac.uk
openathensla.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
password.rcm.ac.uk
openathensla.rcm.ac.uk
learn.rcm.ac.uk
mail.rcm.ac.uk
petergellhorn.rcm.ac.uk
password.rcm.ac.uk
adfs.rcm.ac.uk
ext.mysite.rcm.ac.uk
*.rcm.ac.uk
adfs.rcm.ac.uk
rcmwireless.rcm.ac.uk
rcmldaps.rcm.ac.uk
www.boxoffice.rcm.ac.uk
registration.rcm.ac.uk
researchonline-uat.rcm.ac.uk
learn.rcm.ac.uk
muse.rcm.ac.uk
*.rcm.ac.uk
registration.rcm.ac.uk
password.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
Certificate
The complete raw certificate details for adfs.rcm.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUUvQLf3PK8rALFDJm6V9ybB4bBOgwDQYJKoZIhvcNAQEL BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTE2MDkwMTE1MTg0 NloXDTE4MDkwMTE1MTg0NFowfjELMAkGA1UEBhMCR0IxFzAVBgNVBAgTDkdyZWF0 ZXIgTG9uZG9uMQ8wDQYDVQQHEwZMT05ET04xHzAdBgNVBAoTFlJveWFsIENvbGxl Z2Ugb2YgTXVzaWMxCzAJBgNVBAsTAklUMRcwFQYDVQQDEw5hZGZzLnJjbS5hYy51 azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOml2Mer/AIH+vqI1S4n WNTwYGfqcao4dlAAZijzPVrr/TRSvMBy3mIaFUt6FA89jgFwz1/ONUwiYSwf9fTb bedtqj9cnHu4Z7KCYicyv0fPJU93xVnu/cj8ughvL+QEDpRsy0r0Gv+IWp+TXSp1 aFWnD1sIo3F45zj2UrWe3wal5XddBFhaw1ylWAXbx+UXSIEQyG4seg4OxmSG6H3r 1E4nm+73WOjeNl3SsAx8qPH2V3R/+pcHMUM35NvkY3xotyr+WEM+rMStryKkKouE FPcABgPTNczCbNFE3/Facx064dHpvLZAfue8TFY83pjQj9sekEZdPDOUfBnYmYrV de0CAwEAAaOCAZIwggGOMHMGCCsGAQUFBwEBBGcwZTAqBggrBgEFBQcwAYYeaHR0 cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29tMDcGCCsGAQUFBzAChitodHRwOi8v dHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzIuY3J0MBkGA1UdEQQSMBCC DmFkZnMucmNtLmFjLnVrMFEGA1UdIARKMEgwRgYMKwYBBAG+WAACZAEBMDYwNAYI KwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRv cnkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAfBgNVHSMEGDAWgBSRGWKtWxenMPvw3jklsb2MubhRJzA6BgNVHR8EMzAxMC+g LaArhilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGcyLmNybDAd BgNVHQ4EFgQUFbyV1WZ9ZOp1EM/yyEQAkGCODfAwDQYJKoZIhvcNAQELBQADggEB AMdnrApkKla20z/lAoKYUvqnw2xgPb37E7CGP7H4FG7aw+tcK5Iv54aM/O6etC/z qhaxjJudEyHeBE3pek4xe9c9ZhDZ/7lfUvhx7CaFIKAayEuTx3AXoT4c+cdjaWko NP4FeT1EuN9qeE5h23ja53rTPAKi91S3oG/3wWBYyRAIz7x+RJJdyM05LvGRnA6c f9AqNZRkmct4HUHYXe8EDOFOgaPCUBw8o8eAysNx5bLVy2M1QVuoZukH4GAsutIS oMkNORpGM1ajxg8jGItWHIjDM7zJOC3WxrzYti7TIbwaNvsZ4L0xpmUWXmhgtmfB nCN3Br7HdaU86yj/0pLLuF4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aXYx6v8Agf6+ojVLidY 1PBgZ+pxqjh2UABmKPM9Wuv9NFK8wHLeYhoVS3oUDz2OAXDPX841TCJhLB/19Ntt 522qP1yce7hnsoJiJzK/R88lT3fFWe79yPy6CG8v5AQOlGzLSvQa/4han5NdKnVo VacPWwijcXjnOPZStZ7fBqXld10EWFrDXKVYBdvH5RdIgRDIbix6Dg7GZIbofevU Tieb7vdY6N42XdKwDHyo8fZXdH/6lwcxQzfk2+RjfGi3Kv5YQz6sxK2vIqQqi4QU 9wAGA9M1zMJs0UTf8VpzHTrh0em8tkB+57xMVjzemNCP2x6QRl08M5R8GdiZitV1 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 473579626640917147126949284370232673206548497640 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-01 15:18:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-01 15:18:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LONDON' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Royal College of Music' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adfs.rcm.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29495307160629870562461916590783202130379667791021187058966496182061415916823741374750516426088392120754982954240465418469046355073409581410020481917688309874355791664013748781639884236473467264395638985365284075776485111858785428274983894744474471278067274100089443970552517931996942705900941069977393238918176983736624561483981069953390252360735205900776699262122652917068721983042334328181003605040017261611185597744260588600071359345778741666871707767384264540583085535241244860025383170340797549901392629057466814099610030944667611172390517918979417753773420862407397397239294522490591897862480365046230634821101 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.rcm.ac.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 15bc95d5667d64ea7510cff2c8440090608e0df0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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