player.open.edu

- The Open University -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 4a:de:e4:e4:09:5a:61:0e:8a:18:45:02:87:2d:95:3d:31:fc:b4:0e was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Open University

Company registration number: April-23-69
Organization: The Open University
Organization unit: IT
State / Province: Buckinghamshire
Locality: MILTON KEYNES
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:de:e4:e4:09:5a:61:0e:8a:18:45:02:87:2d:95:3d:31:fc:b4:0e
Serial Number (int): 427436021673042349665875154531447208315170108430
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ea:1b:b3:38:52:8f:2f:9d:2f:38:67:f3:0b:46:b6:49:1b:d7:13:69
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 56:ea:77:42:50:96:10:34:0f:67:07:c3:b5:f3:28:ff:15:d2:44:dc
Fingerprint (sha256): d2:87:87:3e:a0:e3:01:55:ea:2d:70:4c:bf:1d:c4:8e:40:a7:2b:6e:ae:48:7d:b7:66:6b:00:7d:64:7f:63:da

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate player.open.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for player.open.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

player.open.edu

Other certificates including the domain name open.edu

(limited to 100 certificates)
player.open.edu
www-dev.open.edu
msds-acct.open.edu
www-internal.open.edu
www-internal.open.edu
openlearncreatelive.open.edu
www.open.edu
olclive-internal.open.edu
msds.open.edu
open.ac.uk
www-syst-external.open.edu
www.open.edu
stadium.open.ac.uk
olcsyst.open.edu
www-dev.open.edu
msds.open.edu
player.open.edu
msds.open.edu
www-nft-internal.open.edu
www-test.open.edu
www.open.edu
www.open.edu
www.open.edu
stadium.open.ac.uk
www-acct.open.edu
stadium.open.ac.uk
msds.open.edu
www.open.edu
msds.open.edu
stadium.open.ac.uk
stadium.open.ac.uk
msds-acct.open.edu
stadium.open.ac.uk
www-internal.open.edu
msds-test.open.edu
olcsyst-internal.open.edu
msds.open.edu
msds.open.edu
www.open.edu
player.open.edu
stadium.open.ac.uk
cdn-nft.open.edu
www-nft.open.edu
openlearnacct-internal.open.edu
msds-acct.open.edu
stadium.open.ac.uk
openlearncreateacct-internal.open.edu
player.open.edu
msds-acct.open.edu
open.ac.uk
www-syst.open.edu
www-syst.open.edu
www.open.edu
stadium.open.ac.uk
www-syst-internal.open.edu
stadium.open.ac.uk
msds.open.edu
stadium.open.ac.uk
msds-acct.open.edu
www-acct.open.edu
www.open.edu
openlearnacct-internal.open.edu
www-test.open.edu
player.open.edu
player.open.edu
msds.open.edu
msds.open.edu
www.open.edu

Certificate

The complete raw certificate details for player.open.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH2DCCBcCgAwIBAgIUSt7k5AlaYQ6KGEUChy2VPTH8tA4wDQYJKoZIhvcNAQEL
BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd
BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMTgxMTAyMTQ0OTU0WhcN
MjAxMTAyMTQ1OTAwWjCByzETMBEGCysGAQQBgjc8AgEDEwJHQjEaMBgGA1UEDwwR
R292ZXJubWVudCBFbnRpdHkxFDASBgNVBAUTC0FwcmlsLTIzLTY5MQswCQYDVQQG
EwJHQjEYMBYGA1UECAwPQnVja2luZ2hhbXNoaXJlMRYwFAYDVQQHDA1NSUxUT04g
S0VZTkVTMRwwGgYDVQQKDBNUaGUgT3BlbiBVbml2ZXJzaXR5MQswCQYDVQQLDAJJ
VDEYMBYGA1UEAwwPcGxheWVyLm9wZW4uZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsPgWcO6Wj3tIROGWk3lwcXwKm4sYy7Ky31UBdVEdlDuru0VV
CTrwwfelvO4DOFcZ/ChCyJkr6R3vGhQSU9cKHsM2/RAWJFkzcPrNBrWMLUAFwzDO
FV9GaEDJnZpGjreLrdj6O5E/KmQoks1Mf4MfHJVrI9arY3l4MtDOtZxsPVvZbrGP
j0uMY3auzB5Ed40umMFAaUjZ4QBgi7Q6WW/m9tGL/pwFMIE4RKgLUbUg5+b+iDk6
bMrVdZ6TYg8jj3txipeCioSme+hpmRoU+JHuuCwWAUhDlqXlQLQ9s3kC92ecZk5s
6zm6H+s9ci96lAWRIAqT5CnKFYjNz6ZLpFOd8wIDAQABo4IDMzCCAy8wDAYDVR0T
AQH/BAIwADAfBgNVHSMEGDAWgBTlhFTQkEmfOLryyeEqCMVOn6BIPzB4BggrBgEF
BQcBAQRsMGowOQYIKwYBBQUHMAKGLWh0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2Jh
bC5jb20vcXZldnNzbGczLmNydDAtBggrBgEFBQcwAYYhaHR0cDovL2V2Lm9jc3Au
cXVvdmFkaXNnbG9iYWwuY29tMBoGA1UdEQQTMBGCD3BsYXllci5vcGVuLmVkdTBa
BgNVHSAEUzBRMEYGDCsGAQQBvlgAAmQBAjA2MDQGCCsGAQUFBwIBFihodHRwOi8v
d3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbS9yZXBvc2l0b3J5MAcGBWeBDAEBMB0GA1Ud
JQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA8BgNVHR8ENTAzMDGgL6AthitodHRw
Oi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdmV2c3NsZzMuY3JsMB0GA1UdDgQW
BBTqG7M4Uo8vnS84Z/MLRrZJG9cTaTAOBgNVHQ8BAf8EBAMCBaAwggF+BgorBgEE
AdZ5AgQCBIIBbgSCAWoBaAB3ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaO
HtGFAAABZtTwDtoAAAQDAEgwRgIhAOSy2DXbezGvFs3w/55cDgoXTXgXMUJwstJI
XIqRpKVSAiEAndstOiQWtYZEpNWcott3lMZAkMAQ9PXWCwHiJ6ygh/oAdgBvU3as
MfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWbU8BALAAAEAwBHMEUCIBOn
bGLbUn/C+SgJ/HP0Ij/R9wTW+ArMmyNm0HkzrolBAiEA9cSnxKybYCerEFmasTOc
B1VOVO0XL1sak2y2FmmCmhcAdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/
XqCDDwAAAWbU8A8uAAAEAwBGMEQCIHVqEES63hCfq7g7FAOoT5Y+jcGS9g5/Orxg
SlEgJbHhAiB0s85VaihMnf7vzwebnJ+6Ox/fPpKPFpkrZ6PIumW1xzANBgkqhkiG
9w0BAQsFAAOCAgEAE+E6HkF3XJIa+hkiUnWPQ75Hho/JkMnJBhO0TKdKbQAKDuNO
jgqD1Lm7Ff6hErWNTHNB6ImldulsQGBBsPlDvwblcakXbUNUBtu28ZRSmcbtYu0s
A4CnJqk4kNOWThCViZlc5emO4Zmcw1KuRXbm8vTawegbUTi9t40eZ7rSfaqLumx6
4m5qO0aLfjaGgfcVk9zazG/wSb3vLv8OvcZr8fXQO2g5cISkLUMbGNRfDlziftLQ
2s3HDu41S65NOOcfAGvFOp8LK5v0g3FaD+9KPWHQWafqfqIDQBhHJjoh+PWBttmi
wjuzcI6ZlSje1hZHWC9gFzsX9dbE9V4Mm463C6Qh/ino5SjMSDWZvWVw73bW6DAO
4cgqlQ4Mq3BjAtavgA0SAtcQlJgbtzxYiGVcf1lFI+WgTeHHFJ7Me12hfO5x4AaU
jHtvCpWizcbK5W7lCZAvuFU+S4B3HXaaHVWOKhDMfs3A0Q2zKNnLYbe6kP2l49Oi
hMA/EKASJ5po/Ja3HqnChBsjRtCbZBHtFLcGciCiRSVUXVJe8o8BcnZBChzX6/eA
NEaRbcLJcvc2CXQjEti1SE3cejpg8lzQF0Yy9kIWkb4puimVyuisJjXZqC++CD6I
0uxcjEH1ac2VAEnUrfQP5RjNL5BbzmWsxOMk+IH4cxgQydWVW70Sume2Vos=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPgWcO6Wj3tIROGWk3lw
cXwKm4sYy7Ky31UBdVEdlDuru0VVCTrwwfelvO4DOFcZ/ChCyJkr6R3vGhQSU9cK
HsM2/RAWJFkzcPrNBrWMLUAFwzDOFV9GaEDJnZpGjreLrdj6O5E/KmQoks1Mf4Mf
HJVrI9arY3l4MtDOtZxsPVvZbrGPj0uMY3auzB5Ed40umMFAaUjZ4QBgi7Q6WW/m
9tGL/pwFMIE4RKgLUbUg5+b+iDk6bMrVdZ6TYg8jj3txipeCioSme+hpmRoU+JHu
uCwWAUhDlqXlQLQ9s3kC92ecZk5s6zm6H+s9ci96lAWRIAqT5CnKFYjNz6ZLpFOd
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427436021673042349665875154531447208315170108430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 14:49:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-02 14:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'April-23-69'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buckinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MILTON KEYNES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Open University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'player.open.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22340278259067084031494416098753367117023898735176249314502560476853347033859545416375249300937017470164746579205888696933487526694102938531343307254015315292198387738756362027044747542595636690789418408760609926332455993994104011468697542820267796162273170235134480630577247081774224028654999796511908248300798947070116302408199537993446817025344156916455480614118629284951193492132659078146424139849397891794458885141588335311624808229574918989019720925961140192934429051060967069619895783227413462924543034615877956730999546111469879137480144551764988195952407848209371313588920641910140983040763520537320442011123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.open.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea1bb338528f2f9d2f3867f30b46b6491bd71369
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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