mijn.dijklander.nl

- Stichting Dijklander Ziekenhuis -

Issued by QuoVadis PKIoverheid EV CA

About this certificate

This digital certificate with serial number 5f:20:68:2e:64:91:dc:ca:7c:a9:bc:93:a7:ff:1e:e7:ae:c7:f7:b6 was issued on by QuoVadis Trustlink BV.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Dijklander Ziekenhuis

Company registration number: 41235021
Organization: Stichting Dijklander Ziekenhuis
State / Province: Noord-Holland
Locality: Hoorn
Country: NL

QuoVadis Trustlink BV

Organization: QuoVadis Trustlink BV
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:20:68:2e:64:91:dc:ca:7c:a9:bc:93:a7:ff:1e:e7:ae:c7:f7:b6
Serial Number (int): 543076822539023676967260488331757442423583143862
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 33:ee:dc:a8:91:6a:56:41:a3:96:1a:82:f7:ae:05:12:1a:a2:00:4a
AuthorityKeyId: 94:ff:e7:6e:0b:a9:6f:e3:e1:91:59:ca:08:5e:cd:b7:c5:08:3c:69

Fingerprint (sha1): 0f:d6:39:a3:aa:2c:06:b9:5a:81:07:4f:15:b9:5f:ba:0e:05:80:df
Fingerprint (sha256): be:ca:79:b4:d0:7b:50:cf:cd:7c:19:e5:f1:c6:0b:c2:a0:b3:df:50:43:44:7e:1c:de:09:99:95:22:36:4c:8c

Issuing Certificate URL: http://trust.quovadisglobal.com/pkioevg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/pkioevg2.crl

Check the revocation status for certificate mijn.dijklander.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mijn.dijklander.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mijn.dijklander.nl

Other certificates including the domain name dijklander.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for mijn.dijklander.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHKDCCBRCgAwIBAgIUXyBoLmSR3Mp8qbyTp/8e567H97YwDQYJKoZIhvcNAQEL
BQAwUjELMAkGA1UEBhMCTkwxHjAcBgNVBAoMFVF1b1ZhZGlzIFRydXN0bGluayBC
VjEjMCEGA1UEAwwaUXVvVmFkaXMgUEtJb3ZlcmhlaWQgRVYgQ0EwHhcNMTkwNDA5
MDgyMDI3WhcNMjEwNDA5MDgzMDAwWjCBwzETMBEGCysGAQQBgjc8AgEDEwJOTDEd
MBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xETAPBgNVBAUTCDQxMjM1MDIx
MQswCQYDVQQGEwJOTDEWMBQGA1UECAwNTm9vcmQtSG9sbGFuZDEOMAwGA1UEBwwF
SG9vcm4xKDAmBgNVBAoMH1N0aWNodGluZyBEaWprbGFuZGVyIFppZWtlbmh1aXMx
GzAZBgNVBAMMEm1pam4uZGlqa2xhbmRlci5ubDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMoQxCdU27AEP/uEQGTfrZU8CLKV50fNG/jwkF4bwL3mOLgb
AYfvzmeijOI07vJ7fZ1rA8QoSnl4XPYNmzBRBc7P0tSv/HPvHbOFlCwRmY4j+uuS
vtS293NJPX2PIjvZQ3X++I6ce7h3TeTR6JdB7TyGpa3svpHeKMC+styAjzUOpv6r
spxFc7Uz310ZKrhRSHFOu8ApMd8FrcnHfIvrKiAyoxXgsQRyj9O+oa8TAHCnSOC0
bREZntGcxTg/RH1tVE2HI+LISI3D7quMT/5raYDEjFFrgW8genSKhF5dzL6YNuNt
wSa+CJNXY8p1nGTW5HUohjeoDxetFkXb/hpvljkCAwEAAaOCAoIwggJ+MAwGA1Ud
EwEB/wQCMAAwHwYDVR0jBBgwFoAUlP/nbgupb+PhkVnKCF7Nt8UIPGkwdAYIKwYB
BQUHAQEEaDBmMDgGCCsGAQUFBzAChixodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9i
YWwuY29tL3BraW9ldmcyLmNydDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVv
dmFkaXNnbG9iYWwuY29tMB0GA1UdEQQWMBSCEm1pam4uZGlqa2xhbmRlci5ubDCC
ARYGA1UdIASCAQ0wggEJMIH9BglghBABh2sBAgcwge8wgbYGCCsGAQUFBwICMIGp
DIGmUmVsaWFuY2Ugb24gdGhpcyBjZXJ0aWZpY2F0ZSBieSBhbnkgcGFydHkgYXNz
dW1lcyBhY2NlcHRhbmNlIG9mIHRoZSByZWxldmFudCBRdW9WYWRpcyBDZXJ0aWZp
Y2F0aW9uIFByYWN0aWNlIFN0YXRlbWVudCBhbmQgb3RoZXIgZG9jdW1lbnRzIGlu
IHRoZSBRdW9WYWRpcyByZXBvc2l0b3J5LjA0BggrBgEFBQcCARYoaHR0cDovL3d3
dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAHBgVngQwBATAdBgNVHSUE
FjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDov
L2NybC5xdW92YWRpc2dsb2JhbC5jb20vcGtpb2V2ZzIuY3JsMB0GA1UdDgQWBBQz
7tyokWpWQaOWGoL3rgUSGqIASjAOBgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBAHAvNdVZricVxFXXxVNt5zmlcyIN
25lBIrdiElbj/SiL0Qzci/Dq2IEWzmWAF7fdwjpXDamzJqtCq/R1EzwuF+CpnKKw
HhDfyH3LevLhfbj6WW23WCCAoeMELVpUKXgDTXfSV+MqeT7SRwxJ+q7Ugy9gX1Ym
FIJaM5SIaCLpuAk6mxWhgf8doZ4klLYWitvzUPG9+H2VgB9khzSE+ScKXWT/h9ng
XiCtyhdO3OqsJl3SYsmVHQVchcQYNYpplevdtZVlhZ1vssw6LjC63TpiO+ztaaWW
4Ms9eLsU3LfSEKmjHKJBnYLtCP3KMpLgiS2uA/c6O8m8q83XBakLnNNnM14cPYx/
qiyCkx9Ra2LpuxK+WE9gP+u78Vype4lO2PzUPBzpl8KOuW+J097MCVhXcEN8yyKO
TLhuC7i3ojkyREktWrGfnQs1KMh/93KHJcfm3PYZ5m8lWwK3vvGKVOTCFyijlV8H
rmmB4wDpdeVZsOEfgAh9FxfA4ldrFSuH+7fh+iWrnKb51Ce4EH2Klp7u/FiXIpDg
KNjgXVFKXlhOQlQb8+0ZM9aoEy7KkTYLFWqJW0P4ScPc8iATQ1i8198RUxS5W3Sp
zvms27cQva+chV4L3J/cwOJsH0I2BYy+u1et7OV4d/Z36mCxxTkc3XLGyvFbM3yx
XtlpFThZnZQCT7MY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhDEJ1TbsAQ/+4RAZN+t
lTwIspXnR80b+PCQXhvAveY4uBsBh+/OZ6KM4jTu8nt9nWsDxChKeXhc9g2bMFEF
zs/S1K/8c+8ds4WULBGZjiP665K+1Lb3c0k9fY8iO9lDdf74jpx7uHdN5NHol0Ht
PIalrey+kd4owL6y3ICPNQ6m/quynEVztTPfXRkquFFIcU67wCkx3wWtycd8i+sq
IDKjFeCxBHKP076hrxMAcKdI4LRtERme0ZzFOD9EfW1UTYcj4shIjcPuq4xP/mtp
gMSMUWuBbyB6dIqEXl3Mvpg2423BJr4Ik1djynWcZNbkdSiGN6gPF60WRdv+Gm+W
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 543076822539023676967260488331757442423583143862
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid EV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 08:20:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-09 08:30:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '41235021'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hoorn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stichting Dijklander Ziekenhuis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mijn.dijklander.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25508405336908315858720869945994227628044003215228967034660484385033963972626986986395293605676332852058036658174923235390702748028407748676688563389028490555190917095704500621605183901853785792992002607863243933010831960329247184510074367211510684530896096210783701484513566188425822785252313547565352101430589989655165966482746813609749989353016699689085236487996848600237143413500332722771277742298717397009637064371115235159485352137257504057091008735279042322733083756679506242888877076510600536534484525549867653838827218157884411810203316849044504906475576849777003415560384446810781583617525868282229325534777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94ffe76e0ba96fe3e19159ca085ecdb7c5083c69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/pkioevg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.dijklander.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (269 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/pkioevg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33eedca8916a5641a3961a82f7ae05121aa2004a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00702f35d559ae2715c455d7c5536de739a573220ddb994122b7621256e3fd288bd10cdc8bf0ead88116ce658017b7ddc23a570da9b326ab42abf475133c2e17e0a99ca2b01e10dfc87dcb7af2e17db8fa596db7582080a1e3042d5a542978034d77d257e32a793ed2470c49faaed4832f605f562614825a3394886822e9b8093a9b15a181ff1da19e2494b6168adbf350f1bdf87d95801f64873484f9270a5d64ff87d9e05e20adca174edceaac265dd262c9951d055c85c418358a6995ebddb59565859d6fb2cc3a2e30badd3a623beced69a596e0cb3d78bb14dcb7d210a9a31ca2419d82ed08fdca3292e0892dae03f73a3bc9bcabcdd705a90b9cd367335e1c3d8c7faa2c82931f516b62e9bb12be584f603febbbf15ca97b894ed8fcd43c1ce997c28eb96f89d3decc09585770437ccb228e4cb86e0bb8b7a2393244492d5ab19f9d0b3528c87ff7728725c7e6dcf619e66f255b02b7bef18a54e4c21728a3955f07ae6981e300e975e559b0e11f80087d1717c0e2576b152b87fbb7e1fa25ab9ca6f9d427b8107d8a969eeefc58972290e028d8e05d514a5e584e42541bf3ed1933d6a8132eca91360b156a895b43f849c3dcf220134358bcd7df115314b95b74a9cef9acdbb710bdaf9c855e0bdc9fdcc0e26c1f4236058cbebb57adece57877f677ea60b1c5391cdd72c6caf15b337cb15ed9691538599d94024fb318