Class(sec:_X.509CertificateData complete restriction(sec:hasAsset allValuesFrom(sec:X.509CertificateData)) sec:HasAsset)