Class(sec:_CertificateData complete restriction(sec:hasAsset allValuesFrom(sec:CertificateData)) sec:HasAsset)