news.man.poznan.pl

- Instytut Chemii Bioorganicznej Polskiej Akademii Nauk -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 04:34:ab:37:4c:7c:48:2e:80:ae:26:01:b5:0e:8b:54 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Instytut Chemii Bioorganicznej Polskiej Akademii Nauk

Organization: Instytut Chemii Bioorganicznej Polskiej Akademii Nauk
Organization unit: Poznanskie Centrum Superkomputerowo-Sieciowe
Locality: Poznań
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:ab:37:4c:7c:48:2e:80:ae:26:01:b5:0e:8b:54
Serial Number (int): 5590384093045745664743700392546569044
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cf:ea:a3:8c:0a:01:83:68:a7:7e:2a:1e:3f:f6:15:2c:4e:33:4a:27
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 30:0c:36:f4:56:00:84:2e:01:95:5d:cc:ef:93:30:2e:00:f6:ff:4e
Fingerprint (sha256): 05:4c:32:41:32:12:56:fb:c7:7c:b9:bc:d7:82:b5:7f:3c:79:fe:9b:82:e7:9d:d6:77:24:a6:55:4a:2e:0c:83

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate news.man.poznan.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.man.poznan.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.man.poznan.pl
www.news.man.poznan.pl

Other certificates including the domain name man.poznan.pl

(limited to 100 certificates)
arum.man.poznan.pl
padus.man.poznan.pl
www.pogoda.man.poznan.pl
lonicera.man.poznan.pl
news.man.poznan.pl
bursera.man.poznan.pl
jira.man.poznan.pl
paris.man.poznan.pl
avena2.man.poznan.pl
symbiote-dev.man.poznan.pl
smartzoo.man.poznan.pl
nogalia.man.poznan.pl
jira.man.poznan.pl
symbiote-open.man.poznan.pl
tickets.tmp.man.poznan.pl
bellis-f.man.poznan.pl
avena2.man.poznan.pl
ibl-bpp.tmp.man.poznan.pl
apps.man.poznan.pl
rebutia.man.poznan.pl
www.wlin.pl
moss3.man.poznan.pl
ranzania.man.poznan.pl
foodie-vm3.man.poznan.pl
meteo.man.poznan.pl
padus.man.poznan.pl
ammi.man.poznan.pl
codon.man.poznan.pl
www.pogoda.man.poznan.pl
owncloud.man.poznan.pl
gazella.tmp.man.poznan.pl
lappula.man.poznan.pl
vine.man.poznan.pl
ibl-pbl.tmp.man.poznan.pl
symbiote.man.poznan.pl
codon.man.poznan.pl
symbiote-open.man.poznan.pl
piwik.man.poznan.pl
smartzoo.man.poznan.pl
paris.man.poznan.pl
monstera.man.poznan.pl
balsa.man.poznan.pl
malva.man.poznan.pl
berula.man.poznan.pl
ferula.man.poznan.pl
gitlab.pcss.pl
adonis.man.poznan.pl
lime.man.poznan.pl
sunflower.man.poznan.pl
piwik.man.poznan.pl
prunus-61.man.poznan.pl
symbiote-dev.man.poznan.pl
lime.man.poznan.pl
gymnocladus.man.poznan.pl
nogalia.man.poznan.pl
rhus-106.man.poznan.pl
mahonia.man.poznan.pl
loheria.man.poznan.pl
wiki.man.poznan.pl
epad.man.poznan.pl
webmail.man.poznan.pl
projekty.drive.man.poznan.pl
symbiote-dev.man.poznan.pl
spacewalk.man.poznan.pl
verbena.man.poznan.pl
gitlab.pcss.pl
pogoda.man.poznan.pl
periploca.man.poznan.pl
helianthus.mgmt.man.poznan.pl
hibiscus.man.poznan.pl
epad.man.poznan.pl
rebutia.man.poznan.pl
symbiote-dev.man.poznan.pl
phelum.man.poznan.pl
codon.man.poznan.pl
nogalia.man.poznan.pl
jira.man.poznan.pl
turn1.man.poznan.pl
coldenia.man.poznan.pl
ftp.man.poznan.pl
hpc.man.poznan.pl
armeria.man.poznan.pl
git.man.poznan.pl
apps.man.poznan.pl
ferula.man.poznan.pl
gridlab.man.poznan.pl
registry.apps.man.poznan.pl
worm.man.poznan.pl
meteo.man.poznan.pl
fresenia.man.poznan.pl
arum.man.poznan.pl
codon.man.poznan.pl
cortusa.man.poznan.pl
lappula.man.poznan.pl
strategia2020plus.man.poznan.pl
meteo.man.poznan.pl
mahonia.man.poznan.pl
wiki.man.poznan.pl
avena2.man.poznan.pl
symbiote.man.poznan.pl

Certificate

The complete raw certificate details for news.man.poznan.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGnDCCBYSgAwIBAgIQBDSrN0x8SC6AriYBtQ6LVDANBgkqhkiG9w0BAQ0FADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xOTA4MDkwMDAwMDBaFw0yMTA4MTMxMjAwMDBaMIGzMQswCQYDVQQG
EwJQTDEQMA4GA1UEBwwHUG96bmHFhDE+MDwGA1UEChM1SW5zdHl0dXQgQ2hlbWlp
IEJpb29yZ2FuaWN6bmVqIFBvbHNraWVqIEFrYWRlbWlpIE5hdWsxNTAzBgNVBAsT
LFBvem5hbnNraWUgQ2VudHJ1bSBTdXBlcmtvbXB1dGVyb3dvLVNpZWNpb3dlMRsw
GQYDVQQDExJuZXdzLm1hbi5wb3puYW4ucGwwggIiMA0GCSqGSIb3DQEBAQUAA4IC
DwAwggIKAoICAQDCJkw6HDqLvy6bNTYwDdrtjLHtyQ0nAXCnjqz187zKmhQ+aJu5
yOd/1S+FoKOO2BCUL32p9rYfeVLE1Fk9Z6+54PBO+ITq/usu6/SLLan+myQ8zHVV
rhWkCgL0//mrQqug8Xyis8YvsjrnNwr/FPvQ2ArWudX4eFt8Kxb5XwV+IVxkawht
yW9EYk7aVIsRt18gMDCOknDSo7G9m6S3Mn6eywjjJ/9Dn+a+uJr7PBe4KvJTOpJc
FXFrs7Gavx/GQa6mHG4JKgLUg7YeuVEHW3ZOw7vtSxHi5wCtE6nsg/TJetV+iF6x
sEf8X143i69FYKrNzObmhzX9X2w+mI/R1cyuTbkXskxeQWWQkez093NjG5KgCc+S
ImpjPeKBTlnorNtmGyHB04fS7fdNCQvRXT2vLhohhce7fCrp9I83Xw+xCu37jBY9
savitzpYbg7A8xks+toqz2JsOnAROYQaWHsuBEkqRuf6NzlTbK9Fuv5wUUnnnA1D
TabaG3DqPbKVDhPWkicYHyKMzvI3LwEQrlIslymrvNzBD2oCEkhBckWdQwuImV1N
O7ALcG4sjtu9TWUvMY2uiUggfcDBl003MPtCOaxO0hHnvZ0z9+EXsAa9EIQFKOvD
//hhEos8ddbrdY4SdfNfzWrEnICzjJwVES07p+ewI8TyDUaa+Luy9SubjwIDAQAB
o4IB+DCCAfQwHwYDVR0jBBgwFoAUZ/2IIBQnmMcJ0iUZu+lREWN1UGIwHQYDVR0O
BBYEFM/qo4wKAYNop34qHj/2FSxOM0onMDUGA1UdEQQuMCyCEm5ld3MubWFuLnBv
em5hbi5wbIIWd3d3Lm5ld3MubWFuLnBvem5hbi5wbDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuG
KWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3JsMC+gLaAr
hilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNybDBMBgNV
HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjBuBggrBgEFBQcBAQRiMGAwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA4BggrBgEFBQcwAoYsaHR0
cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcnQwDAYDVR0T
AQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQ0FAAOCAQEA
NBt1wLZThP2/UbEZWbuVXPWONKYM77QOyuamgGytDF3LtMSWmHGcDqgVkXKE3svd
KbSOlzwH4wRjMfDMsmthUVfSRJneSoQHgrGipJhMtA8lGKyN61f6Fstk8JLS0y7q
mnn6SIu47lLAfrzW5QSzwb0n3MTMD6psIYAoMh+sTW8zGhREvvYi9jDw2pVMR/H7
ADnYc3rvu73PJY2xkhEeHpcsr6tXbTuba13YlpKtI1Mhp1W3SZNBezUrN9AFRi01
WCCzwJRrfW9e47VhmIxWykAnb9AUpXMUufoezaNqj7z2+BAQtAc7Z/HEoVu4yeR0
dD7WGHx5XRcxyCTom8wk3A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5590384093045745664743700392546569044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Poznań'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instytut Chemii Bioorganicznej Polskiej Akademii Nauk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Poznanskie Centrum Superkomputerowo-Sieciowe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.man.poznan.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792061266525227095389162144253399892887427206637593736600120094412032517926025386595144899303802196698821361050097241490584718863256174962966925306121791267025245838726064047142584516535827481539413125040769484683864886035083590637613905127717803892506950647825000922241876550150731349951123213252848537599045854538363003213012257275534414975675067475108773623390352769925095926618627007258098224977344238501400229597179017283729049305420561093856233888491233851057167170015253399630253307498580326779684068086503869119114827769512479014451388264410934468853368032253515580832867390042863874020610803319666174002861073005298605514542310227703884500946214094217580264428795025244661038065065617497446746332502356402338443308725488006017993652509167792077535512677680521523405974035972239315660860778817349055820875970344578941246500723007175504723355536381986667409502147772283920446846059216448539308207272863490314209184187102013979374861121442088718518124059472917549337366168696176086656361002197404278251820928872162032484168826246078470571182502522249042973669228775488242247242669615620088619471311060281905827769987458535642532084325549087244633313118853203654207697744161913864448791317843785152882280709290187948861350976399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfeaa38c0a018368a77e2a1e3ff6152c4e334a27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.man.poznan.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.news.man.poznan.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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