platformrijksoverheid.nl

- Rijksoverheid -

Issued by QuoVadis CSP - PKI Overheid CA - G2

About this certificate

This digital certificate with serial number 0c:cb:4a:a5:aa:41:89:6c:20:da:8e:3c:24:38:f1:70:9b:3c:2a:fb was issued on by QuoVadis Trustlink BV.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksoverheid

Company registration number: 00000004000000148000
Organization: Rijksoverheid
Organization unit: Dienst Publiek en Communicatie
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

QuoVadis Trustlink BV

Organization: QuoVadis Trustlink BV
Organization unit: Issuing Certification Authority
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:cb:4a:a5:aa:41:89:6c:20:da:8e:3c:24:38:f1:70:9b:3c:2a:fb
Serial Number (int): 73041443207246328837793250805609365697545906939
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 96:bb:06:db:ae:c9:be:d5:3d:9d:53:a3:4a:1a:e9:10:21:da:ad:18
AuthorityKeyId: 69:cb:7f:50:76:00:86:53:95:79:12:c1:58:76:1f:13:ef:f2:4d:a3

Fingerprint (sha1): ea:c9:9e:82:4d:1e:09:e9:31:ce:48:06:d8:6b:d5:5a:8b:fa:2a:85
Fingerprint (sha256): fe:c1:42:b4:c9:b3:de:c6:1b:f4:fa:17:d3:f5:98:d3:06:a5:bf:8a:80:71:9d:aa:e9:f9:64:17:dd:e2:95:79

Issuing Certificate URL: http://trust.quovadisglobal.com/qvocag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvocag2.crl

Check the revocation status for certificate platformrijksoverheid.nl

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platformrijksoverheid.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

platformrijksoverheid.nl
www.platformrijksoverheid.nl
magazines.platformrijksoverheid.nl
magazinesintern.platformrijksoverheid.nl
opendata.platformrijksoverheid.nl
feeds.platformrijksoverheid.nl
english.platformrijksoverheid.nl
magazines.english.platformrijksoverheid.nl
opendata.english.platformrijksoverheid.nl
feeds.english.platformrijksoverheid.nl
delen.platformrijksoverheid.nl

Other certificates including the domain name platformrijksoverheid.nl

(limited to 100 certificates)
platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
opendata.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
onderzoek.rijksoverheid.nl
h1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
webanalyse.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
survey-collect.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
toegang.platformrijksoverheid.nl
a-toegang.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
performance.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
a-api.a-subscribe.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
survey.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
survey-cache.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
artifactory.rijksoverheid.nl
a-cms.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
vpn.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
c-cms.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
ps1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
api.subscribe.platformrijksoverheid.nl
cms.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
platformrijksoverheid.nl

Certificate

The complete raw certificate details for platformrijksoverheid.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLaC9hkUQMMl0XsSrMKR
0mHGBt1tYomeUsMNQFjEzLJqqAxCXp1m+EurtX+42iBn34dJqvQkfFkZGrp4Df/b
AuBnHY6vh98rHHKyIvTtRyCBLTuikYGfqD0ALuoYY17z4c/9Au5Bj3ve+UzYuT7T
bnQlGsAWtkZWZDUh3nCOc1odzr63P/8re1neblsNDkmzC2zyBoETjpRg/HGJwypP
WE8BFYNAmIQYEr1/NCvcpfC1/zxOzPepKg6eG8CTxFdCO5m3mkzRTsMQWgJUTjlZ
EIReZ4nORnRV51fn+YtBPmDuAJLrunn7yhYECUZEODgXgEC/p3noMkH4BTXSxHyH
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73041443207246328837793250805609365697545906939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Issuing Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis CSP - PKI Overheid CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-15 15:47:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 15:47:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000004000000148000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksoverheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dienst Publiek en Communicatie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'platformrijksoverheid.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20288128602919810657887440572522732968884468391200001404764059848514785915334706920983467154417937843074672339521491607414163336304286966704082742974367821436579721805560426636848532878190601474889377918742772859516431370157768951654128804055033262423602559575703730265379559613141555821977897641124071388868361020274713511658738488468269899466339003065872206201543553567843131903419705605004998245445823920796541381222619606217230000273136122506232902728063269903259619999699008930571792997072562553699858254756814697546472150196557260012069030514172881013265677487147697016191625590104065797604656678991935716493223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (296 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository  (http://www.quovadisglobal.com).'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (398 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazinesintern.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.english.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.english.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.english.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delen.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvocag2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 69cb7f5076008653957912c158761f13eff24da3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvocag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96bb06dbaec9bed53d9d53a34a1ae91021daad18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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