radius1.iach.cas.cz
- Středisko společných činností AV ČR, v. v. i. -
Issued by TERENA SSL CA 3
About this certificate
This digital certificate with serial number 0b:b1:d3:30:15:d8:b8:a9:a1:39:98:09:e9:ad:79:0d was issued on by TERENA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Středisko společných činností AV ČR, v. v. i.
Organization:
Středisko společných činností AV ČR, v. v. i.
Locality:
Praha
Country: CZ
Country: CZ
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:b1:d3:30:15:d8:b8:a9:a1:39:98:09:e9:ad:79:0dSerial Number (int): 15544827895734095507174519572198684941
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8c:81:34:4d:9d:f2:9a:2b:99:32:6e:e8:18:7f:c7:a5:5b:52:fc:a4
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62
Fingerprint (sha1): b9:c2:b7:0b:aa:b5:1e:87:8f:6a:bb:91:fa:d9:33:54:41:c1:d6:20
Fingerprint (sha256): 01:92:91:6a:ce:16:9d:60:85:21:d9:cf:53:61:9b:35:db:c6:aa:d6:8c:12:2b:0b:01:f5:98:c2:e5:d5:dc:2c
Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl
Check the revocation status for certificate radius1.iach.cas.cz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for radius1.iach.cas.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
radius1.iach.cas.cz
Other certificates including the domain name cas.cz
(limited to 100 certificates)
tbase.iic.cas.cz
www.astroplate.cz
sympa.utia.cas.cz
ecbd.img.cas.cz
www.iic.cas.cz
dev.herv.img.cas.cz
wtserv1.tok.ipp.cas.cz
breberka.site.cas.cz
avcr.cz
jiftach.cas.cz
radius1.iach.cas.cz
www.astroplate.cz
clb.ucl.cas.cz
matsrv.math.cas.cz
*.irsm.cas.cz
ds-uchp-backup.asuch.cas.cz
logbook.tok.ipp.cas.cz
allsky-bart.asu.cas.cz
*.lib.cas.cz
bibliografie.ujc.cas.cz
m3art.utia.cas.cz
filosofia.flu.cas.cz
arclib-test.lib.cas.cz
www.ibot.cas.cz
albina.uochb.cas.cz
reflexe.flu.cas.cz
fgusrvmail.fgu.cas.cz
fermium.iic.cas.cz
redmine.nh.cas.cz
rukovet.cms.flu.cas.cz
etno.eu.cas.cz
orbis.img.cas.cz
mail.flu.cas.cz
folia.paru.cas.cz
hroch486.icpf.cas.cz
sslvpn.cs.cas.cz
lhr.ueb.cas.cz
engmech.cz
projects.asu.cas.cz
www.udu.cas.cz
tok.ipp.cas.cz
durotest.img.cas.cz
web-lb04.img.cas.cz
ancientmedieval.flu.cas.cz
biblio.hiu.cas.cz
ds-uchp-an.asuch.cas.cz
aplab.ueb.cas.cz
madla.ujc.cas.cz
m3art.utia.cas.cz
www.uochb.cas.cz
sda.soc.cas.cz
idpmain.icpf.cas.cz
vosvrdaweb.utia.cas.cz
web-lb04.img.cas.cz
radius.slu.cas.cz
lexy.uochb.cas.cz
vocloud-dev.asu.cas.cz
pallas.ujc.cas.cz
login.lib.cas.cz
allsky-bart.asu.cas.cz
post2.ilaw.cas.cz
postak.ujc.cas.cz
fw1.ujf.cas.cz
vestlon.img.cas.cz
*.ezproxy.lib.cas.cz
archiv.soc.cas.cz
ca.icpf.cas.cz
kolbaba.utia.cas.cz
logbook.tok.ipp.cas.cz
wiki.eis.cas.cz
sumo.orient.cas.cz
fe.nh.cas.cz
ulozdata.ujc.cas.cz
vpnportal.img.cas.cz
avcr.cz
ftp5.cs.cas.cz
refugee.mua.cas.cz
ojs.irsm.cas.cz
academy2.cas.cz
ciel.biomed.cas.cz
www.math.cas.cz
chemspace.img.cas.cz
illias.icpf.cas.cz
martell.bc.cas.cz
application.math.cas.cz
ds-uchp-aero.asuch.cas.cz
alfresco1.eis.cas.cz
gemma.ujf.cas.cz
sova1.cs.cas.cz
users.canam.ujf.cas.cz
netmon.ujf.cas.cz
ironport.img.cas.cz
www4.ucl.cas.cz
fw.flu.cas.cz
d50.asu.cas.cz
filr.cs.cas.cz
*.libj.cas.cz
korpus.vokabular.ujc.cas.cz
mail.zamek-liblice.cz
kramerius.lib.cas.cz
www.astroplate.cz
sympa.utia.cas.cz
ecbd.img.cas.cz
www.iic.cas.cz
dev.herv.img.cas.cz
wtserv1.tok.ipp.cas.cz
breberka.site.cas.cz
avcr.cz
jiftach.cas.cz
radius1.iach.cas.cz
www.astroplate.cz
clb.ucl.cas.cz
matsrv.math.cas.cz
*.irsm.cas.cz
ds-uchp-backup.asuch.cas.cz
logbook.tok.ipp.cas.cz
allsky-bart.asu.cas.cz
*.lib.cas.cz
bibliografie.ujc.cas.cz
m3art.utia.cas.cz
filosofia.flu.cas.cz
arclib-test.lib.cas.cz
www.ibot.cas.cz
albina.uochb.cas.cz
reflexe.flu.cas.cz
fgusrvmail.fgu.cas.cz
fermium.iic.cas.cz
redmine.nh.cas.cz
rukovet.cms.flu.cas.cz
etno.eu.cas.cz
orbis.img.cas.cz
mail.flu.cas.cz
folia.paru.cas.cz
hroch486.icpf.cas.cz
sslvpn.cs.cas.cz
lhr.ueb.cas.cz
engmech.cz
projects.asu.cas.cz
www.udu.cas.cz
tok.ipp.cas.cz
durotest.img.cas.cz
web-lb04.img.cas.cz
ancientmedieval.flu.cas.cz
biblio.hiu.cas.cz
ds-uchp-an.asuch.cas.cz
aplab.ueb.cas.cz
madla.ujc.cas.cz
m3art.utia.cas.cz
www.uochb.cas.cz
sda.soc.cas.cz
idpmain.icpf.cas.cz
vosvrdaweb.utia.cas.cz
web-lb04.img.cas.cz
radius.slu.cas.cz
lexy.uochb.cas.cz
vocloud-dev.asu.cas.cz
pallas.ujc.cas.cz
login.lib.cas.cz
allsky-bart.asu.cas.cz
post2.ilaw.cas.cz
postak.ujc.cas.cz
fw1.ujf.cas.cz
vestlon.img.cas.cz
*.ezproxy.lib.cas.cz
archiv.soc.cas.cz
ca.icpf.cas.cz
kolbaba.utia.cas.cz
logbook.tok.ipp.cas.cz
wiki.eis.cas.cz
sumo.orient.cas.cz
fe.nh.cas.cz
ulozdata.ujc.cas.cz
vpnportal.img.cas.cz
avcr.cz
ftp5.cs.cas.cz
refugee.mua.cas.cz
ojs.irsm.cas.cz
academy2.cas.cz
ciel.biomed.cas.cz
www.math.cas.cz
chemspace.img.cas.cz
illias.icpf.cas.cz
martell.bc.cas.cz
application.math.cas.cz
ds-uchp-aero.asuch.cas.cz
alfresco1.eis.cas.cz
gemma.ujf.cas.cz
sova1.cs.cas.cz
users.canam.ujf.cas.cz
netmon.ujf.cas.cz
ironport.img.cas.cz
www4.ucl.cas.cz
fw.flu.cas.cz
d50.asu.cas.cz
filr.cs.cas.cz
*.libj.cas.cz
korpus.vokabular.ujc.cas.cz
mail.zamek-liblice.cz
kramerius.lib.cas.cz
Certificate
The complete raw certificate details for radius1.iach.cas.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIQC7HTMBXYuKmhOZgJ6a15DTANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0yMDAzMTcwMDAwMDBaFw0yMjAzMjIxMjAwMDBaMHkxCzAJBgNVBAYT AkNaMQ4wDAYDVQQHEwVQcmFoYTE8MDoGA1UECgwzU3TFmWVkaXNrbyBzcG9sZcSN bsO9Y2ggxI1pbm5vc3TDrSBBViDEjFIsIHYuIHYuIGkuMRwwGgYDVQQDExNyYWRp dXMxLmlhY2guY2FzLmN6MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 34Pa/K447uZkFa9Qru4PNwzoNofqFwOnaIA9YWmY1FzhShA30HK7B5bIaduNiDMk XlD0v3JHwFdvCnLHie2rN+AGJZyCyDFwy8kRmq2xm5cW5afzbigN11TqD6kaFhyp 1r5KJhsl44esb+aZlZeTSksZdeggD2rCojIVEIe6lBSHNQKtWHYAHjRrZlRsrOQc ly33QTXd6tMyq1wlaVo0AhKt0Q/DOCWJM+EzMblGG+SxK1ovb5I2LM4y04EU1yFL 7JDf3C5/clQB/jgFiuC4KODsYVDekYx5Zq3Ny/nZw227H6QMX+2ZnS6mR92w6wZA VOPW6BdPIvC4zMjb56i/VwIDAQABo4IB4TCCAd0wHwYDVR0jBBgwFoAUZ/2IIBQn mMcJ0iUZu+lREWN1UGIwHQYDVR0OBBYEFIyBNE2d8pormTJu6Bh/x6VbUvykMB4G A1UdEQQXMBWCE3JhZGl1czEuaWFjaC5jYXMuY3owDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNybDAvoC2gK4Yp aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcmwwTAYDVR0g BEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAIBgZngQwBAgIwbgYIKwYBBQUHAQEEYjBgMCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOAYIKwYBBQUHMAKGLGh0dHA6 Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3J0MAwGA1UdEwEB /wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADrp d94LpPz/Uuj7tfltagfrZk/mZaiEG9V6VVqINAzxsCUnZDcoLpyQG5dd9phDLGXY R29PQn7vV6kJiueslNcQdgZuiGCb39cYAl6AOdqGgardWBB697OHMw4+1/0fauxE hjaYtC05qR1Utf6/30HRn03JVBb9yg3R1olMlC2PI5uB7SEHMFC/X3et8IC0XQxs 1XBhmN6o21+lgDlQ/v00SnYhwmhr23P4dSExTXqVXk6MtgRDWYHSPp89nVHN5t3p xyOdyx4n/Yb+MqZlfLCTIAhGSX1SyL+SQTvTQa8T+Lgpmry8ElKUx6FYheR4yqw1 JeHVnRnivCLwkQlxEoc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34Pa/K447uZkFa9Qru4P NwzoNofqFwOnaIA9YWmY1FzhShA30HK7B5bIaduNiDMkXlD0v3JHwFdvCnLHie2r N+AGJZyCyDFwy8kRmq2xm5cW5afzbigN11TqD6kaFhyp1r5KJhsl44esb+aZlZeT SksZdeggD2rCojIVEIe6lBSHNQKtWHYAHjRrZlRsrOQcly33QTXd6tMyq1wlaVo0 AhKt0Q/DOCWJM+EzMblGG+SxK1ovb5I2LM4y04EU1yFL7JDf3C5/clQB/jgFiuC4 KODsYVDekYx5Zq3Ny/nZw227H6QMX+2ZnS6mR92w6wZAVOPW6BdPIvC4zMjb56i/ VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15544827895734095507174519572198684941 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Středisko společných činností AV ČR, v. v. i.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'radius1.iach.cas.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28216162337436727358104088616977454476233010580244914138185986539676731854209689124724878176454008988673498041634226548710086094434209990985719246522617899431064947941268167080323388511724841449188554521655414254245970382254044829856091572289815548084041642198166371480290022427801540340766572177504413550860151445485212759140210189574916609472808979719968585059275193496251731700272080811180573106079546908833439884015371629438931041549091870097474317230255255327096454766445895344212165435470002502348599881936249501493270598427846778356429611115456879097663851472753852821713182230079236983973473667297024127057751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8c81344d9df29a2b99326ee8187fc7a55b52fca4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radius1.iach.cas.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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