vap2host-k.vwfsag.de

- Volkswagen Financial Services AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 6e:8d:dc:44:c5:6d:34:02:d8:5d:72:2d:f3:41:b3:8c:d9:cc:6b:45 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Financial Services AG

Organization: Volkswagen Financial Services AG
State / Province: Niedersachsen
Locality: Braunschweig
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:8d:dc:44:c5:6d:34:02:d8:5d:72:2d:f3:41:b3:8c:d9:cc:6b:45
Serial Number (int): 631152577968146033844606305110581391402445073221
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 0d:d2:4d:64:24:38:20:ac:d5:0e:23:ed:d6:5b:32:13:f8:32:fd:af
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): b2:d6:e4:bf:0d:ed:d3:8b:a2:ab:e7:ef:cd:96:7f:8c:f2:19:14:f8
Fingerprint (sha256): 9d:99:1e:11:93:22:60:f9:86:12:57:f6:65:cb:29:04:1c:bf:8a:33:83:3c:77:67:85:0d:da:fa:32:4f:84:4a

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate vap2host-k.vwfsag.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vap2host-k.vwfsag.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vap2host-k.vwfsag.de

Other certificates including the domain name vwfsag.de

(limited to 100 certificates)
services.vwfsag.de
www.vwfsag.de
auth.vwfs.com
evaluation.training.vwfsag.de
profin.vwfsag.de
mx1.vwfsag.de
www.vwfsag.de
marketingtoolbox.vwfsag.de
auth.vwfs.com
marketingtoolbox.vwfsag.de
gwcenter.vwfsag.de
vap2host.vwfsag.de
services.vwfsag.de
auth.vwfs.com
gwcenter.vwfsag.de
www.vwfsag.de
mimidev.vwfsag.de
kons.vwfsag.de
feedback.training.vwfsag.de
mx1.vwfsag.de
www.training.vwfsag.de
partner.vwfsag.de
partner.vwfsag.de
www.vwfsag.de
gwcenter.vwfsag.de
mx2.vwfsag.de
www.vwfsag.de
www.vwfsag.de
www.training.vwfsag.de
gwcenter.vwfsag.de
mx2.vwfsag.de
www.vwfsag.de
kons.vwfsag.de
webaccess.vwfsag.de
www.vwfsag.de
kons.vwfsag.de
presse-event.vwfsag.de
vwfs.com
vwfsag.com
www.training.vwfsag.de
profin.vwfsag.de
training.vwfsag.de
webaccess.vwfsag.de
www.vwfsag.com
feedback.training.vwfsag.de
evaluation.training.vwfsag.de
www.training.vwfsag.de
auth.vwfs.com
partner.vwfsag.de
www.vwfsag.de
mimiprod.vwfsag.de
partner.vwfsag.de
partner.vwfsag.de
www.vwfsag.de
vwfs.com
mx1.vwfsag.de
partner-kons.vwfsag.de
feedback.training.vwfsag.de
evaluation.training.vwfsag.de
www.vwfsag.de
partner.vwfsag.de
services.vwfsag.de
vap2host-k.vwfsag.de
marketingtoolbox.vwfsag.de
kons.vwfsag.de
gwcenter.vwfsag.de
partner.vwfsag.de
evaluation.training.vwfsag.de
mimikons.vwfsag.de
auth.vwfs.com
www.vwfsag.de
gwcenter.vwfsag.de
feedback.training.vwfsag.de
api.training.vwfsag.de
feedback.training.vwfsag.de
mimikons.vwfsag.de
kons.vwfsag.de
www.training.vwfsag.de
feedback.training.vwfsag.de
gwcenter.vwfsag.de
www.vwfsag.de
mimiprod.vwfsag.de
vap2host-i.vwfsag.de
partner.vwfsag.de
www.vwfsag.de
gwcenter.vwfsag.de
kons.vwfsag.de
marketingtoolbox.vwfsag.de
evaluation.training.vwfsag.de
webaccess.vwfsag.de
training.vwfsag.de
gwcenter.vwfsag.de
profin.vwfsag.de
mimiprod.vwfsag.de
partner-kons.vwfsag.de
www.training.vwfsag.de
www.vwfsag.de
profin.vwfsag.de
www.vwfsag.de

Certificate

The complete raw certificate details for vap2host-k.vwfsag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIICzCCBfOgAwIBAgIUbo3cRMVtNALYXXIt80GzjNnMa0UwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIzMDMyOTEyMjMy
MFoXDTI0MDMyOTEyMTgwMFowgYYxCzAJBgNVBAYTAkRFMRYwFAYDVQQIDA1OaWVk
ZXJzYWNoc2VuMRUwEwYDVQQHDAxCcmF1bnNjaHdlaWcxKTAnBgNVBAoMIFZvbGtz
d2FnZW4gRmluYW5jaWFsIFNlcnZpY2VzIEFHMR0wGwYDVQQDDBR2YXAyaG9zdC1r
LnZ3ZnNhZy5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANoYy1II
KpR0PRNyA2x/Vnt41nagc8tPaumNacD3NaWnKocl+hojGmht5R9YJP1aTOdh/lgW
7RHsGMxxqNnGEviGvCJJOVf2WOGR83B5yWd10cjadYcKwQo04CsibsnD3yhyEZsv
xeBz2Vkz94ROMMUiie0pFXYbIfJk5h6TIVvU00KJKGu9TYWyauEXL3S5BX5Nqc+F
HAjwu5vJSb7QkTXeDnhdMW7+duCgZY+qhGuV7H+iRO5DwKT/NGCjwo3eEVIbB0+K
kKSnB7dTXjKBMxg4pqWB4J28IhBllFkh9zqPxovcs9mxh4G9SrvzrvHv0C4G3Id/
Pgy+jjCGLr58IJsCAwEAAaOCA6cwggOjMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAU
sxKJtalLNbwVAPCA6dh4h/ETfHYwcwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAC
hitodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzMuY3J0MCoG
CCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wHwYDVR0R
BBgwFoIUdmFwMmhvc3Qtay52d2ZzYWcuZGUwWwYDVR0gBFQwUjBGBgwrBgEEAb5Y
AAJkAQEwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5xdW92YWRpc2dsb2JhbC5j
b20vcmVwb3NpdG9yeTAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsG
AQUFBwMBMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwucXVvdmFkaXNnbG9i
YWwuY29tL3F2c3NsZzMuY3JsMB0GA1UdDgQWBBQN0k1kJDggrNUOI+3WWzIT+DL9
rzAOBgNVHQ8BAf8EBAMCBaAwggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB3ANq2
v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABhy1bwf4AAAQDAEgwRgIh
ANcUXcma/EqEgxPx6uAKamHK8IPnRvkLSQzyz6auCsoOAiEA+siyKVm7oK2zGtyx
APfi95s7G0wyBc/i1S49RYphtYgAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIK
n+ZnTFo6dAAAAYctW8GcAAAEAwBIMEYCIQDww5Y9f4ulZPWUK1d2WRHNL1eGM9sb
sQFG1YYiv8lydQIhAIU113F318kcD0YRvKBZyajGi+Iflj0OWx/Rt1lNzcTdAHUA
O1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGHLVvC1wAABAMARjBE
AiBneDUoOKMbX43w8ISc5/4MwUaNHRhLSqTX/RF9R1ReIQIgOqG40sgv7arT7Zw6
qU4iGarTtNDVNH6aezOUEjm59yIAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcv
o6odBxPTDAAAAYctW8KvAAAEAwBGMEQCIBHMJGlomhFC+5NCcG7/C5DJUfxsBL63
rEfR90Knjgw7AiAfFNxBCgEAx4wK/7v5l52TED5Mu33FGQMraJZpLw1mXzANBgkq
hkiG9w0BAQsFAAOCAgEANaIRsK+nMSQskvlOPNuFbvvkR3K0JvSu+7z9oPGrThVw
fD9PxSMxwfO3shpSasyP9NQHL0xfZSYgo3Fnou8eo/tbWNEo/hiZilp11BDOh55x
9QxD+hVSTYoLj/dPOeImw5WZCCRKnsStXDszhEs86jxryHVZAcc+0fYbwgnrHWFA
GM7MJpOWkjx7b0anujTHCR4KHu0YR0jOADMMXHgNbRDWU7a54mxeA9QsQ7qaXZzT
qRCoa6jU3eUGNjk172B8xSGHI08Y0l6+N1e4aUq9/L2BiBy/Du/M3QlGFbSLDE6v
neL8D/ZIBfJsmFoEzmIREz8AIeVJCaGovfQVimOCLl5vwugqAAIAG8qP803EekE1
jhwzTX2+8Qzc5V2xv3xnQvB2M6OLTQs5xeV9MDa8NpGBpsEH79TF+o6MqKE7bcld
uNVxLZUYQBmAThZ6eOR8vTc6Dxuv87UoFG4LdxT7bVVakyHUrSDk49xJ7jNDpCRy
2mr3u5c7JxaetKZpJQZzqkHifhLIERnKPr+xDkhQBbsTZNnrCxbc5kOnh2DzqfQT
+t7v49dEkmSkoPRCuN2Nf93lbUvJ9jdJ9FrX/b/qLK8WGDwQ7t8xDGmbMp9LYLF/
RY+cq/fmlv+B8A/9+Ya0qoc+dOZDpDlwejAIpdH+ZZxc12DDdtOUftajtMqriQ4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hjLUggqlHQ9E3IDbH9W
e3jWdqBzy09q6Y1pwPc1pacqhyX6GiMaaG3lH1gk/VpM52H+WBbtEewYzHGo2cYS
+Ia8Ikk5V/ZY4ZHzcHnJZ3XRyNp1hwrBCjTgKyJuycPfKHIRmy/F4HPZWTP3hE4w
xSKJ7SkVdhsh8mTmHpMhW9TTQokoa71NhbJq4RcvdLkFfk2pz4UcCPC7m8lJvtCR
Nd4OeF0xbv524KBlj6qEa5Xsf6JE7kPApP80YKPCjd4RUhsHT4qQpKcHt1NeMoEz
GDimpYHgnbwiEGWUWSH3Oo/Gi9yz2bGHgb1Ku/Ou8e/QLgbch38+DL6OMIYuvnwg
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 631152577968146033844606305110581391402445073221
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 12:23:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 12:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Braunschweig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Volkswagen Financial Services AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vap2host-k.vwfsag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27532176968395716339509281443526353065278938819575289367647732316838808705456297842687639977570834362857637993467308645034457058274679923602468756409006528839674594031734625445202789643116079527319978476304692135250273057187107072513888420292098952943693004470858499379617080725977426886795448771537941451060624182382286362726513359994707612696640833284033614593739550063025814707748588762477062508959200948266508529231801455788195180616502235702351552840486983196237388568874101902703217791338526746703472752677420420218727772339137522172651603207610078792351519218267115462839404366380319633915028451136297548652699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vap2host-k.vwfsag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0dd24d64243820acd50e23edd65b3213f832fdaf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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