brainbanknetwork.ac.uk

- University of Bristol -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 7c:6d:d7:35:7c:5c:a0:b6:4a:43:ce:eb:57:4a:00:d0:27:e6:03:4c was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bristol

Company registration number: 1909-05-17
Organization: University of Bristol
State / Province: Bristol
Locality: Bristol
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:6d:d7:35:7c:5c:a0:b6:4a:43:ce:eb:57:4a:00:d0:27:e6:03:4c
Serial Number (int): 710364384150541936606465621986653536610920301388
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: c9:08:48:10:ee:7c:c7:69:68:4e:ab:a0:f4:1c:ec:d9:4c:fb:f4:46
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 80:9b:89:74:b8:80:36:68:25:0a:03:3b:f6:df:70:ff:5d:de:3f:e6
Fingerprint (sha256): fa:6a:08:1b:34:ee:17:8e:20:ca:ba:9c:a0:8d:1c:08:10:f2:c7:a2:a3:ff:59:e8:05:90:8c:55:f7:fc:78:97

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate brainbanknetwork.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brainbanknetwork.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brainbanknetwork.ac.uk
brainbanknetwork.cse.bris.ac.uk

Other certificates including the domain name brainbanknetwork.ac.uk

(limited to 100 certificates)
brainbanknetwork.ac.uk
brainbanknetwork.ac.uk
brainbanknetwork.ac.uk
brainbanknetwork.ac.uk
brainbanknetwork.ac.uk

Certificate

The complete raw certificate details for brainbanknetwork.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH7TCCBdWgAwIBAgIUfG3XNXxcoLZKQ87rV0oA0CfmA0wwDQYJKoZIhvcNAQEL
BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd
BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMjAwNjMwMDk1ODA1WhcN
MjIwNjMwMTAwODAwWjCBuDETMBEGCysGAQQBgjc8AgEDEwJHQjEaMBgGA1UEDwwR
R292ZXJubWVudCBFbnRpdHkxEzARBgNVBAUTCjE5MDktMDUtMTcxCzAJBgNVBAYT
AkdCMRAwDgYDVQQIDAdCcmlzdG9sMRAwDgYDVQQHDAdCcmlzdG9sMR4wHAYDVQQK
DBVVbml2ZXJzaXR5IG9mIEJyaXN0b2wxHzAdBgNVBAMMFmJyYWluYmFua25ldHdv
cmsuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqM96RFe5a
La2TLSpom0Qc7nd+rAP9mhLqqDlTTqkhR605q5Tfwr2H6Fp/YysO6ZDda6WkqpSH
18eITxhwzkQmZeVSgb7TY/Wxx5tuESF0rE33kCoWcElf60/hh+O8M5cLxi1lGmxX
voILxSrDSczHs9j89XwGueffxxGj51weUq1KcPgM2pVdVQDuYODWFg8GE3BPYJ+v
tVDcXeg1KSfghlIHsMWi8+s30IpDmccaNdAoRBkMOQJrLW92U8MbNrCMSpZgwg9m
ry9kZcmTVHSfl9JoHD4bTei38sNdDeT7Zr2yNYR07Nhsia8/RH4vyuPAW1PcDGy6
shjN1h30RjU/AgMBAAGjggNbMIIDVzAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaA
FOWEVNCQSZ84uvLJ4SoIxU6foEg/MHgGCCsGAQUFBwEBBGwwajA5BggrBgEFBQcw
AoYtaHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdmV2c3NsZzMuY3J0
MC0GCCsGAQUFBzABhiFodHRwOi8vZXYub2NzcC5xdW92YWRpc2dsb2JhbC5jb20w
QgYDVR0RBDswOYIWYnJhaW5iYW5rbmV0d29yay5hYy51a4IfYnJhaW5iYW5rbmV0
d29yay5jc2UuYnJpcy5hYy51azBaBgNVHSAEUzBRMEYGDCsGAQQBvlgAAmQBAjA2
MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbS9yZXBv
c2l0b3J5MAcGBWeBDAEBMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA8
BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9x
dmV2c3NsZzMuY3JsMB0GA1UdDgQWBBTJCEgQ7nzHaWhOq6D0HOzZTPv0RjAOBgNV
HQ8BAf8EBAMCBaAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AFYUBpov18Ls
0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABcwSysSoAAAQDAEcwRQIgOe4buRnn
kSxc64ajJYMMjzvR1kKntkqKtv6Rh8JYWEQCIQCP4Z/iwGRAc3bPeVUK70RM1NuJ
VX0wPNcUmC7CAR7gqgB2ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceE
AAABcwSysRcAAAQDAEcwRQIhAIzWO2sFZ9w7fjLpjZHF3nHH2fHaOcG121eb/NPy
Z4+VAiBplajQC6b0FC6VbZ7Ywxh88+KFgcBo5s0SwJsQ3i9rdQB2AEHIyrHfIkZK
EMahOglCh15OMYsbA+vrS8do8JBilgb2AAABcwSysVIAAAQDAEcwRQIhAOiCoQ+v
b8CQfnL7HWzrsmt8+4HZ34Fvt3KqCLTtqi/1AiAL/vojQA7b7uUuSyRzXwdQYqo9
L+3HPHyyj3L1osnxBzANBgkqhkiG9w0BAQsFAAOCAgEAWUZqzsMFAocYfs6p3A5J
rYWXrqe34X+TXQYLho+1ErAIK3lBTmmcEV4RtPTFSO3BPtPxAKKLIRQ4PJw8quFa
jLMEQd9PzogUmzc6l/figBsJs41SPkDE+NUrx5Ql/OTqmX1HlNasj2TcIB0GSWNI
u0eEzb9Nb7dv2TTWWjEw2SD+i4jN1P5cwMelF2UcUR8qIEzZEOInmPjgT/idEqnw
BRLP98B+eNv7j+G9uV/haOw69l5YTu0F5iVnhZgAkcN1cQUzu7eFJVZVe3i028rX
4KLz7d4AWAa0hJk9i4wzM8FDpMmBR1eYwHnhbMYIJ2rt/aFglEmbtsxWno3+H+Ge
pHXRvlhxhtzd6c36WOIjmzsVzCaeD8vKKyVzDmyY2n+blg9UBF4nzpeWI2gKKd94
1wJgp+kFzKYD65rlvE2B1uWCSVMHZcY0cZL3KMzlLnCGVyX9YU2LENpmeyMpfkXn
fFYYppq2vH67ZzQ49VzPHu/cG/UhWUh/fFDw3xhR1790BbPXrbQCp6EF1kfxeobP
6WpfbLPHGGMXHOpViXzpTQ26WgFikx5bilxDGFNa66C4MM+5k9WYIAf/EZM+t05f
YOI0oH3uDAtlJSxnq6qlQr+gtzGFISHNRYBIKU1/lv/koxu7yW92Ql39joyvkpM6
19jsKGwnY4ad2ybZ9aNHr4U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjPekRXuWi2tky0qaJtE
HO53fqwD/ZoS6qg5U06pIUetOauU38K9h+haf2MrDumQ3WulpKqUh9fHiE8YcM5E
JmXlUoG+02P1scebbhEhdKxN95AqFnBJX+tP4YfjvDOXC8YtZRpsV76CC8Uqw0nM
x7PY/PV8Brnn38cRo+dcHlKtSnD4DNqVXVUA7mDg1hYPBhNwT2Cfr7VQ3F3oNSkn
4IZSB7DFovPrN9CKQ5nHGjXQKEQZDDkCay1vdlPDGzawjEqWYMIPZq8vZGXJk1R0
n5fSaBw+G03ot/LDXQ3k+2a9sjWEdOzYbImvP0R+L8rjwFtT3AxsurIYzdYd9EY1
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 710364384150541936606465621986653536610920301388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 09:58:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-30 10:08:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1909-05-17'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'brainbanknetwork.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21486089599322568641674949277771716826448476462321497809873923376710933440235093582200751848198143532286542464677107238945032912708508835988043144561200563644577988465075539058082723035817967061891910561802313497633483462158565281084270645584850283357913912050452815533912422045174752978190345013494744892993638420288076122932193299295577498375287174628855382261964183754525852087315573142065605988674234254309833052082312931665596523732700099802801119260383979025572819841819536474270719096957722658996444054102727716304187652926061655581957753503966445238794333388995712337027105827410743177063302771529381698745663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainbanknetwork.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainbanknetwork.cse.bris.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9084810ee7cc769684eaba0f41cecd94cfbf446
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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