sip.fifa.org

- Federation Internationale de Football Association (FIFA) -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 53:0f:75:fa:f1:3d:68:0f:68:15:41:a5:7e:77:9d:b0:79:67:9a:fe was issued on by QuoVadis Limited.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federation Internationale de Football Association (FIFA)

Organization: Federation Internationale de Football Association (FIFA)
Organization unit: FIFA-IT Digital Workplace
State / Province: Zurich
Locality: Zurich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 53:0f:75:fa:f1:3d:68:0f:68:15:41:a5:7e:77:9d:b0:79:67:9a:fe
Serial Number (int): 474191022685065173725716204284341659987467541246
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 22:20:57:4c:d4:b9:05:9e:79:e8:d6:2f:7f:ca:d3:38:ea:18:06:76
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 69:3d:62:42:a2:0c:1e:bb:e9:69:ba:4c:62:26:e4:fd:89:86:68:9d
Fingerprint (sha256): 8e:6d:61:48:f8:11:c5:6a:45:a4:e3:2b:e0:13:52:66:e1:72:b9:ab:d9:44:84:6f:ba:31:91:39:fb:59:71:0e

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate sip.fifa.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.fifa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.fifa.org
sip.fifadevelopment.com
sip.fifamuseum.org
sip.2022.qa
ucc.fifa.org
ucc.2022.qa
uccweb1.fifa.org
uccweb2.fifa.org
uccweb1.2022.qa
uccweb2.2022.qa
lyncdiscover.fifa.org
lyncdiscover.fifamuseum.org
lyncdiscover.fifadevelopment.com
lyncdiscover.2022.qa
webconf.2022.qa
webconf.fifa.org

Other certificates including the domain name fifa.org

(limited to 100 certificates)
mi.fifa.org
cargo.fifa.org
mail.fifa.org
*.xtm-intl.com
querydb.fifa.org
webmail.fifa.org
sip.fifa.org
sts.fifa.org
sentry.fifa.org
*.fifa.org
owa.fifa.org
*.ifes-uat.fifa.org
sentry2.fifa.org
*.fifa.org
sts.fifa.org
reg.fifa.org
cargo.fifa.org
sam.fifa.org
portal.fifa.org
*.fifa.org
eptest.fifa.org
survey.fifa.org
portal.fifa.org
fqp.fifa.org
login-dev.fifa.org
survey.fifa.org
survey.fifa.org
*.fifa.org
*.fifa.org
webmaillight.fifa.org
survey.fifa.org
mi.fifa.org
sentry2.fifa.org
turftender.fifa.org
reg.fifa.org
tmscms.fifa.org
webmaillight.fifa.org
share.fifa.org
forward.fifa.org
survey.fifa.org
portal.fifa.org
mi.fifa.org
survey.fifa.org
querydb.fifa.org
survey.fifa.org
survey.fifa.org
translation.fifa.org
*.apps-u.fifa.org
turfmaintenance.fifa.org
testforward.fifa.org
*.ifes2-ibm.fifa.org
reg.fifa.org
sts.fifa.org
owalight.fifa.org
cargo.fifa.org
translation-request.fifa.org
epuat.fifa.org
*.fifa.org
tmscms.fifa.org
guest.fifa.org
*.ifes2-dev.fifa.org
survey.fifa.org
mail.fifa.org
*.fifa.org
webmail.fifa.org
tmscms.fifa.org
survey.fifa.org
legal-backoffice.fifa.org
apps.fifa.org
portal.fifa.org
sts.fifa.org
match.fifa.org
input.fifa.org
*.apps-u.fifa.org
mail.fifa.org
reg.fifa.org
translation-uat.fifa.org
*.xtm-intl.com
ifes2-prd.fifa.org
sni.cloudflaressl.com
turfmaintenance.fifa.org
querydb.fifa.org
match.fifa.org
accreditation.fifa.org
tmscms.fifa.org
*.fifa.org
sip.fifa.org
*.ifes2-tst.fifa.org
pmkt.fifa.org
sip.fifa.org
*.fifa.org
turfmaintenance.fifa.org
survey.fifa.org
*.xtm-intl.com
webmaillight.fifa.org
*.ifes2.fifa.org
tfs.fifa.org
webmail.fifa.org
survey.fifa.org
*.ifes2-uatrc.fifa.org

Certificate

The complete raw certificate details for sip.fifa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUUw91+vE9aA9oFUGlfnedsHlnmv4wDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTIwMDMyNTA4MDU1
N1oXDTIyMDMyNTA4MTUwMFowga0xCzAJBgNVBAYTAkNIMQ8wDQYDVQQIDAZadXJp
Y2gxDzANBgNVBAcMBlp1cmljaDFBMD8GA1UECgw4RmVkZXJhdGlvbiBJbnRlcm5h
dGlvbmFsZSBkZSBGb290YmFsbCBBc3NvY2lhdGlvbiAoRklGQSkxIjAgBgNVBAsM
GUZJRkEtSVQgRGlnaXRhbCBXb3JrcGxhY2UxFTATBgNVBAMMDHNpcC5maWZhLm9y
ZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJpQEtJRxPKlIGiNAD7j
nxP2CiCsG0mcj5gpuziD0eyIt/DoihzlYTP5xmGLFhI+A6Y5ShkfdnwYtkqEY/27
NDxlt2YL9cNMXahWxMYGcMAOHWQRBVPIh07sKL4VviWRYgBB8nJuYbjT3GgC7kFu
NmAA7weG53xOMBSZy0gu53LdT5rzqKKb6Pz2AH5WmriMt7E5OssJA3oeXPNXt/+l
3uDQiIpOhj7Tv5wyvAUqZ5PfQfc3yciRVJo2HlSEnHUKlMvHs80PqCMyX20Gxyt7
mgMIrS+xBVezsI4sOQPoIgv5M8492rNP73RSTVNqWjHasXPanMbNTIf0CDPLUK1w
Ok0CAwEAAaOCAuAwggLcMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUkRlirVsXpzD7
8N45JbG9jLm4UScwcwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8v
dHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzIuY3J0MCoGCCsGAQUFBzAB
hh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wggFFBgNVHREEggE8MIIB
OIIMc2lwLmZpZmEub3JnghdzaXAuZmlmYWRldmVsb3BtZW50LmNvbYISc2lwLmZp
ZmFtdXNldW0ub3JnggtzaXAuMjAyMi5xYYIMdWNjLmZpZmEub3Jnggt1Y2MuMjAy
Mi5xYYIQdWNjd2ViMS5maWZhLm9yZ4IQdWNjd2ViMi5maWZhLm9yZ4IPdWNjd2Vi
MS4yMDIyLnFhgg91Y2N3ZWIyLjIwMjIucWGCFWx5bmNkaXNjb3Zlci5maWZhLm9y
Z4IbbHluY2Rpc2NvdmVyLmZpZmFtdXNldW0ub3JngiBseW5jZGlzY292ZXIuZmlm
YWRldmVsb3BtZW50LmNvbYIUbHluY2Rpc2NvdmVyLjIwMjIucWGCD3dlYmNvbmYu
MjAyMi5xYYIQd2ViY29uZi5maWZhLm9yZzBRBgNVHSAESjBIMEYGDCsGAQQBvlgA
AmQBATA2MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNv
bS9yZXBvc2l0b3J5MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNV
HR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNz
bGcyLmNybDAdBgNVHQ4EFgQUIiBXTNS5BZ556NYvf8rTOOoYBnYwDgYDVR0PAQH/
BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ
rPC64bMaa6tfQ0QZ95OpTOTIaPCF1dyYYtRDV4izOeuy1j3PhkE8deVSwrKqRh4J
3t4SOtNk0QFvj9jjpTGnup3fWKNz0mga+4KYRTxUeaQz4WbVGfU9h1tjeTFex686
WSkd+MhGVeZGpOhchISqCxtMUt+xEVEMmBGfsqj/GdJhJfqrrFwH01mqdsP0+5eX
FRU+BZ2+r+L06ADBqcjLscGbUN7/4syUtAfQZQRxnnakmTMF9mmVYPIANPGgrDKV
LMdOPRZITc+YKkI+iqIz3Mm8rrGjlPMmDyoaHoa0ge1YwRp7UC06qPb8Gg6RC2hh
vsVM/ZH1qYJrK0d2kX7X
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlAS0lHE8qUgaI0APuOf
E/YKIKwbSZyPmCm7OIPR7Ii38OiKHOVhM/nGYYsWEj4DpjlKGR92fBi2SoRj/bs0
PGW3Zgv1w0xdqFbExgZwwA4dZBEFU8iHTuwovhW+JZFiAEHycm5huNPcaALuQW42
YADvB4bnfE4wFJnLSC7nct1PmvOoopvo/PYAflaauIy3sTk6ywkDeh5c81e3/6Xe
4NCIik6GPtO/nDK8BSpnk99B9zfJyJFUmjYeVIScdQqUy8ezzQ+oIzJfbQbHK3ua
AwitL7EFV7Owjiw5A+giC/kzzj3as0/vdFJNU2paMdqxc9qcxs1Mh/QIM8tQrXA6
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 474191022685065173725716204284341659987467541246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 08:05:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-25 08:15:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federation Internationale de Football Association (FIFA)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FIFA-IT Digital Workplace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sip.fifa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19480184689986062822449441822968766766739786192671371964958301334001274462285976150626682833010336505798184079376217583244816241068007373935962739462227092074700582231969552512137462603697424263656894576593763644049893054648781153923841675369063874677015566731045499403893551953113683568911648781384866267587961917754373369399907072769707141675964896088336427195946525580869139264819427151743963691632405350816166345782547028854845987932499934235910749855358200075120107480068501113539676405092435596181867746001022116978713974672870592722885633781927073106470118820864530081610686921420540936797632823983137681848909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (316 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fifa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fifadevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fifamuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.2022.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.fifa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.2022.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb1.fifa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb2.fifa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb1.2022.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb2.2022.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.fifa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.fifamuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.fifadevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.2022.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.2022.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.fifa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2220574cd4b9059e79e8d62f7fcad338ea180676
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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