www-sso.groupware.t.icts.kuleuven.be

- Katholieke Universiteit te Leuven -

Issued by TERENA SSL High Assurance CA 3

About this certificate

This digital certificate with serial number 0c:8f:f7:e0:8e:27:41:fc:83:e4:25:a2:1f:18:4c:f4 was issued on by TERENA.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Katholieke Universiteit te Leuven

Company registration number: 0419.052.173
Organization: Katholieke Universiteit te Leuven
Organization unit: ICTS - CeIF-LNX
State / Province: Vlaams-Brabant
Locality: Leuven
Country: BE

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:8f:f7:e0:8e:27:41:fc:83:e4:25:a2:1f:18:4c:f4
Serial Number (int): 16698261946464307097032507513728683252
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:fe:03:36:e3:40:66:a8:b4:f2:4b:69:84:ac:6a:4f:38:d9:b5:19
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9

Fingerprint (sha1): 18:01:73:90:a0:ef:f3:7b:85:ae:df:bc:c9:f7:9f:09:09:6e:24:8e
Fingerprint (sha256): 01:55:f6:4e:28:d1:62:6e:9c:94:e2:7f:29:21:2d:ce:bd:ef:15:c1:89:18:bf:c9:08:79:b4:8b:75:c4:52:84

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl

Check the revocation status for certificate www-sso.groupware.t.icts.kuleuven.be

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-sso.groupware.t.icts.kuleuven.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-sso.groupware.t.icts.kuleuven.be
icts-sso.groupware.t.icts.kuleuven.be
users-sso.groupware.t.icts.kuleuven.be
admin-sso.groupware.t.icts.kuleuven.be
webdoc-sso.groupware.t.icts.kuleuven.be
poc-sso.groupware.t.icts.kuleuven.be
projects-sso.groupware.t.icts.kuleuven.be
controlpoint-sso.groupware.t.icts.kuleuven.be

Other certificates including the domain name kuleuven.be

(limited to 100 certificates)
alum.kuleuven.be
support.themallschool.org.uk
print.t.icts.kuleuven.be
fac.ppw.kuleuven.be
icts-s-dc2.luna.kuleuven.be
mysql.cs.kotnet.kuleuven.be
bbup1.q.icts.kuleuven.be
account.kuleuven.be
faber.kuleuven.be
workflow.groupware.oad.icts.kuleuven.be
icts-s-exmbx8.luna.kuleuven.be
cwisdb.kuleuven.be
iks32.fys.kuleuven.be
icts-s-desigo3.LUNAH.KULEUVEN.BE
dylius.icts.kuleuven.be
lstat.kuleuven.be
ICTS-S-RDADYL1.lunah.kuleuven.be
vsm-rdg.fysad.fys.kuleuven.be
zebra.cs.kuleuven.be
testjo.t.icts.kuleuven.be
ICTS-S-RDSIVAT1.tad.kuleuven.be
testjo.t.icts.kuleuven.be
voxtron.icts.kuleuven.be
synth.cs.kuleuven.be
*.apps.sp2019.groupware.oad.icts.kuleuven.be
www-sso.groupware.t.icts.kuleuven.be
blackboard-saas.t.icts.kuleuven.be
*.apps-sp2016.groupware.oad.icts.kuleuven.be
kulapp.t.icts.kuleuven.be
groupware.tad.icts.kuleuven.be
fys.kuleuven.be
squaredup.q.icts.kuleuven.be
icts-s-scomgw2.lunah.kuleuven.be
extranet.kuleuven.be
dagkrant.kuleuven.be
fys.kuleuven.be
icts-s-exmbx23.luna.kuleuven.be
ccis-iam-voucherservice.q.icts.kuleuven.be
*.sp2007.groupware.oad.icts.kuleuven.be
spub.icts.kuleuven.be
scanner.ghum.kuleuven.be
butler.cs.kuleuven.be
gbw-s-llk01.luna.kuleuven.be
tickatlab.q.gbiomed.kuleuven.be
TD-GBS-metasys.icts.kuleuven.be
*.apps.ncbgroupware.oad.icts.kuleuven.be
icts-s-dc2.tad.kuleuven.be
prep.cc.kuleuven.be
sg1.icts.kuleuven.be
apitest.feb.kuleuven.be
*.kuleuven.be
mtm.kuleuven.be
*.groupware.t.icts.kuleuven.be
iiw.kuleuven.be
lioo-hardware.icts.kuleuven.be
testjo.t.icts.kuleuven.be
tfs.q.icts.kuleuven.be
sp.biw.kuleuven.be
graduateland.com
webi11.aps.kuleuven.be
gbw-s-vibdock01.luna.kuleuven.be
nexus.icts.kuleuven.be
ICTS-S-RDA1.tad.kuleuven.be
fs.q.icts.kuleuven.be
wayf.q.icts.kuleuven.be
my.kuleuven.be
qmp4e4.cc.kuleuven.be
nieuws.kuleuven.be
co-de.experiments.cs.kuleuven.be
hiva.esat.kuleuven.be
pool01.icts.kuleuven.be
www.cosic.esat.kuleuven.be
icts-p-idm-12.lnx.icts.kuleuven.be
toledo.q.icts.kuleuven.be
legacy-owa.groupware.kuleuven.be
find.kuleuven.be
listserv.icts.kuleuven.be
ICTS-S-RDSLIO1.tad.kuleuven.be
lidkaart.alum.kuleuven.be
*.apps-sp2016.groupware.z.icts.kuleuven.be
GHUM-S-VSH00.LUNA.KULEUVEN.BE
search.t.icts.kuleuven.be
nextvib.gbiomed.kuleuven.be
icts-d-ua-3.lnx.icts.kuleuven.be
rdweb.icts.kuleuven.be
pad.esat.kuleuven.be
icts-d-idm-3.lnx.icts.kuleuven.be
onderwijsaanbod.kuleuven.be
find.t.icts.kuleuven.be
webp12.aps.kuleuven.be
find.q.icts.kuleuven.be
wmsopleiding.cc.kuleuven.be
*.am.thomasmore.ezproxy.kuleuven.be
icts-s-crdwts1.tad.kuleuven.be
ida2014.org
icts-s-dc1.qad.kuleuven.be
drives.kuleuven.be
lyncaccess.kuleuven.be
icts-s-sfbt01.icts.kuleuven.be
stage.soc.kuleuven.be

Certificate

The complete raw certificate details for www-sso.groupware.t.icts.kuleuven.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHiM9dgPvVJIqfi8VGB+
zHFxiJa8UntRla2E8cIcPVnXV8y9GFnfWteowWShBFT+91eHY4zM3dCub2yakm+i
DLVqYMv/OxIBcN6Rh03AKNHv9Vt4KdA0fw3miapnuj4gwsH8yZm/odRM4qlmbxiN
TH7b5YVCawCafzqcNfamrQn0PPhgqvLq5wcedhdU77fPbAuPm1veyDxlcPAUczDm
zMYersPDbS0kOSN/9f9xmNsDdefyS99wpFnR45mEHJNFHDgUlwxZgm4LQY6sncxP
kA06+ZpfRHJ5m10cvc26bJ5kQzoBx9IR+H53rAz3M+/xUR+F6r3F5zW+GS46n3aX
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16698261946464307097032507513728683252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0419.052.173'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vlaams-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leuven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Katholieke Universiteit te Leuven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICTS - CeIF-LNX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-sso.groupware.t.icts.kuleuven.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21267480963689975480859460965067689372543806091965910602788705786445134092582484677509651212179186472349743556807470896308618808492326219252645446804707678351196561523811289383124297865510333507166338046425758694060074101327465809092357437128310558978150007866008160514482746662564047471359760025351643720588769165733913615382760382398237791433653317040753367340919569410529424293874481144018056318992723159885502247827897496006167457893815370311670773807301875834409766927052887088659115259518423437416085562073393310937732885310755023086244611627227606238631979824853131323089962678328763825517002730963745707038491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdfe0336e34066a8b4f24b6984ac6a4f38d9b519
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-sso.groupware.t.icts.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icts-sso.groupware.t.icts.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users-sso.groupware.t.icts.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-sso.groupware.t.icts.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sso.groupware.t.icts.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poc-sso.groupware.t.icts.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects-sso.groupware.t.icts.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlpoint-sso.groupware.t.icts.kuleuven.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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