reindeer.salrm.uaf.edu

- University Of Alaska -

Issued by ipsCA Level 1 CA

About this certificate

This digital certificate with serial number 10:5a:f0:59:2f:d0:41:88:44:23:90:5d:58:05:6b:79:26:b3:19:17 was issued on by ips Certification Authority.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • For certificates valid after 31 Dec 2013, all certificates using RSA public key algorithm MUST have 2048 bits of modulus (BRs: 6.1.5)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

University Of Alaska

Organization: University Of Alaska
Organization unit: Reindeer Research Program
State / Province: Alaska
Locality: Fairbanks
Country: US

ips Certification Authority

Organization: ips Certification Authority
Organization unit: Certificaciones
State / Province: MADRID
Locality: MADRID
Country: ES

This certificate has expire since

Certificate Details

Serial Number (hex): 10:5a:f0:59:2f:d0:41:88:44:23:90:5d:58:05:6b:79:26:b3:19:17
Serial Number (int): 93371856698358509594395558951468757489886107927
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: ea:77:31:66:33:17:c7:ed:f2:8f:89:d3:ce:b7:f4:c0:68:c4:d1:05
AuthorityKeyId: 7d:9e:6b:0e:fc:13:e1:c4:8b:a7:7f:61:ae:60:21:cf:cd:a0:d3:06

Fingerprint (sha1): 50:de:97:48:f9:60:b6:27:9d:cb:5f:f9:2c:94:0f:7c:0b:66:cb:5b
Fingerprint (sha256): 04:79:6b:c9:0a:77:ed:b7:43:8f:90:58:c5:d1:8d:5a:47:b8:19:24:1b:a1:03:ad:52:10:95:db:46:ce:9e:62


Revocation information

OCSP Server: http://ocsplevel101.ipsca.com/ocsp
CRL Distribution Point: http://level101.ipsca.com/crl/ipscalevel1.crl
CRL Distribution Point: http://level102.ipsca.com/crl/ipscalevel1.crl

Check the revocation status for certificate reindeer.salrm.uaf.edu

0

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reindeer.salrm.uaf.edu

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

16 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

[email protected]

Other certificates including the domain name uaf.edu

(limited to 100 certificates)
carpepm.almonds.com
it.uahs.arizona.edu
calendar.sdzsafaripark.org
banking-business-review.com
cdn-test.battlefields.org
libguides.library.uaf.edu
citeak.multidevcom.uaf.edu
banking-business-review.com
athena.snap.uaf.edu
chns120.courseresource.yale.edu
208.lsnc.net
ineshare.uaf.edu
community.uaf.edu
www.ctc.uaf.edu
banking-business-review.com
tls.automattic.com
www.snap.uaf.edu
hub.meed.com
208.lsnc.net
yakamafish-star.net
j2.shared.global.fastly.net
dev.wellness.yale.edu
www.snap.uaf.edu
bejih.com
community.uaf.edu
reindeer.salrm.uaf.edu
www.csc.uaf.edu
live.ucdavis.edu
info-dev.calperformances.org
agd.nebrwesleyan.edu
streetfilms.org
chns168.courseresource.yale.edu
good.gsm.cornell.edu
admissions.hsem.uaf.edu
agd.nebrwesleyan.edu
j2.shared.global.fastly.net
*.email.uaf.edu
dev.embody.yale.edu
tiles.snap.uaf.edu
club.kjzz.org
a.ns.christiancentury.org
bejih.com
dev.wellness.yale.edu
www.ctc.uaf.edu
admissions.bam.uaf.edu
snow.ine.uaf.edu
host2.openminds.com
library.uaf.edu
local3599.com
sara.phys.uaf.edu
nrostatic.com
208.lsnc.net
stage.sfos.uaf.edu
qs.uaf.edu
redirect.web.alaska.edu
cnsm.uaf.edu
208.lsnc.net
www.uaf.edu
a.ns.christiancentury.org
web.cfos.uaf.edu
j2.shared.global.fastly.net
photos.uaf.edu
live.bme.cornell.edu
admissions.hsem.uaf.edu
classes-prep.uaf.edu
agd.nebrwesleyan.edu
cms-prod-edit.uaf.edu
ssl.smugmug.com
j2.shared.global.fastly.net
alaskasprucebeetle.open.uaf.edu
banking-business-review.com
j2.shared.global.fastly.net
inside.gc.cuny.edu
psy-pdcmini01.cla.uaf.edu
bejih.com
archivescatalog.library.uaf.edu
connect.iadb.org
abong.ufcespanol.com
aasdsloth.gsm.cornell.edu
library.uaf.edu
archives.library.uaf.edu
virtuallabs.uaf.edu
akdec.alaska.edu
voicesuncaged.com
community.uaf.edu
www.sfos.uaf.edu
et.uaf.edu
acadmintest.cuofco.org
tls.automattic.com
208.lsnc.net
kenphilipcollection.alaska.edu
banking-business-review.com
bejih.com
us.prod.campusgroups.com
160.167.tmcapital.com
grotto.geobotany.uaf.edu
www.iarc.uaf.edu
161511-web1.vilcek.org
ltdev.uaf.edu
vc.csc.uaf.edu

Certificate

The complete raw certificate details for reindeer.salrm.uaf.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG1TCCBb2gAwIBAgIUEFrwWS/QQYhEI5BdWAVreSazGRcwDQYJKoZIhvcNAQEF
BQAwgbAxCzAJBgNVBAYTAkVTMQ8wDQYDVQQIEwZNQURSSUQxDzANBgNVBAcTBk1B
RFJJRDEkMCIGA1UEChMbaXBzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRgwFgYD
VQQLEw9DZXJ0aWZpY2FjaW9uZXMxGTAXBgNVBAMTEGlwc0NBIExldmVsIDEgQ0Ex
JDAiBgkqhkiG9w0BCQEWFWlwc2NhbGV2ZWwxQGlwc2NhLmNvbTAeFw0xMzAzMTkw
ODIzNTZaFw0xNTAzMjQwODIzNTZaMIG8MQswCQYDVQQGEwJVUzEPMA0GA1UECAwG
QWxhc2thMRIwEAYDVQQHDAlGYWlyYmFua3MxHTAbBgNVBAoMFFVuaXZlcnNpdHkg
T2YgQWxhc2thMSIwIAYDVQQLDBlSZWluZGVlciBSZXNlYXJjaCBQcm9ncmFtMR8w
HQYDVQQDDBZyZWluZGVlci5zYWxybS51YWYuZWR1MSQwIgYJKoZIhvcNAQkBFhVk
c2Jsb2RnZXR0QGFsYXNrYS5lZHUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGB
AMvyiJP38NKgYWZh5NRSi1gmUcsRLvreWe2FdQmlPMNgz8x2gKI6ohFGoe7RmEjv
3y9IKnUJ70gvC1hhEeiX3rqVbSjhmbfR55mJBMrQ2q+LIfgHqXKJeCONAH7n/HbJ
cN8613ygjmsOouzh/gcmDaZwqrcMTXa9pzKcFnQq+lZtAgMBAAGjggNbMIIDVzAJ
BgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIGQDALBgNVHQ8EBAMCBaAwEwYDVR0l
BAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYEFOp3MWYzF8ft8o+J08639MBoxNEFMB8G
A1UdIwQYMBaAFH2eaw78E+HEi6d/Ya5gIc/NoNMGMCAGA1UdEQQZMBeBFWRzYmxv
ZGdldHRAYWxhc2thLmVkdTBbBgNVHRIEVDBSpFAwTjELMAkGA1UEBhMCRVMxJDAi
BgNVBAoTG2lwcyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEZMBcGA1UEAxMQaXBz
Q0EgTGV2ZWwgMSBDQTBxBglghkgBhvhCAQ0EZBZiT3JnYW5pemF0aW9uIEluZm9y
bWF0aW9uIE5PVCBWQUxJREFURUQuIExFVkVMMSBTZXJ2ZXIgQ2VydGlmaWNhdGUg
aXNzdWVkIGJ5IGh0dHBzOi8vd3d3Lmlwc2NhLmNvbS8wKQYJYIZIAYb4QgECBBwW
Gmh0dHA6Ly9sZXZlbDEwMS5pcHNjYS5jb20vMDwGCWCGSAGG+EIBBAQvFi1odHRw
Oi8vbGV2ZWwxMDEuaXBzY2EuY29tL2NybC9pcHNjYWxldmVsMS5jcmwwQwYJYIZI
AYb4QgEDBDYWNGh0dHA6Ly9sZXZlbDEwMS5pcHNjYS5jb20vY3JsL3Jldm9jYXRp
b25MRVZFTDEuaHRtbD8wQAYJYIZIAYb4QgEHBDMWMWh0dHA6Ly9sZXZlbDEwMS5p
cHNjYS5jb20vY3JsL3JlbmV3YWxMRVZFTDEuaHRtbD8wPgYJYIZIAYb4QgEIBDEW
L2h0dHA6Ly9sZXZlbDEwMS5pcHNjYS5jb20vY3JsL3BvbGljeUxFVkVMMS5odG1s
MHMGA1UdHwRsMGowM6AxoC+GLWh0dHA6Ly9sZXZlbDEwMS5pcHNjYS5jb20vY3Js
L2lwc2NhbGV2ZWwxLmNybDAzoDGgL4YtaHR0cDovL2xldmVsMTAyLmlwc2NhLmNv
bS9jcmwvaXBzY2FsZXZlbDEuY3JsMD4GCCsGAQUFBwEBBDIwMDAuBggrBgEFBQcw
AYYiaHR0cDovL29jc3BsZXZlbDEwMS5pcHNjYS5jb20vb2NzcDANBgkqhkiG9w0B
AQUFAAOCAQEAcyu8DwEqnQhjvMEPvTuLl9sxY5EKiVmCELrlNddnccysGxXcx9SW
9PJ4wwp616PqDZGJJ3qrnTnrLrMx3+8pzr8VliQmqsUsqRxHqCpSJTZX1B2841Nw
p0G5NJi6wyLq659PAfmGa232yQFEq5OPVsinD38oviCdPITDLflkkocjhaj5Ws6m
OMyO23YmoDmNXhgiD8WqyOARzaWsogoz2AXZ+TORd1OV74uhEdUsGX+34eSJORLm
bSxacdDNXtYYtah9t8k7BRM5J5u5dGzdmYeGr3ysPCuSvCcoFmWI1c6GtvFGEtxk
d8wE/7r1QxGIKlld5CrAmgn1MnrCkzSnvQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDL8oiT9/DSoGFmYeTUUotYJlHL
ES763lnthXUJpTzDYM/MdoCiOqIRRqHu0ZhI798vSCp1Ce9ILwtYYRHol966lW0o
4Zm30eeZiQTK0NqviyH4B6lyiXgjjQB+5/x2yXDfOtd8oI5rDqLs4f4HJg2mcKq3
DE12vacynBZ0KvpWbQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93371856698358509594395558951468757489886107927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ips Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certificaciones'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipsCA Level 1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-19 08:23:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-24 08:23:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Alaska'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fairbanks'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University Of Alaska'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reindeer Research Program'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'reindeer.salrm.uaf.edu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 143216732260906464558958442697952941390417704130645001353332668478229117016240335092139158715910273384888111236874325629847573141874336440961654212346272442977036298618918980410426373593267755637699204207803096564315392239315710205930490990364996893622145400442604499286119978127676084011793503693745117877869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea7731663317c7edf28f89d3ceb7f4c068c4d105
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d9e6b0efc13e1c48ba77f61ae6021cfcda0d306
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ips Certification Authority'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipsCA Level 1 CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.13 (netscape-comment)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Organization Information NOT VALIDATED. LEVEL1 Server Certificate issued by https://www.ipsca.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.2 (netscape-base-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.4 (netscape-ca-revocation-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/ipscalevel1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.3 (netscape-revocation-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/revocationLEVEL1.html?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.7 (netscape-cert-renewal-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/renewalLEVEL1.html?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.8 (netscape-ca-policy-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/policyLEVEL1.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://level101.ipsca.com/crl/ipscalevel1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://level102.ipsca.com/crl/ipscalevel1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsplevel101.ipsca.com/ocsp'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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