it-appssm02.it.ntnu.no
- NORGES TEKNISK-NATURVITENSKAPELIGE UNIVERSITET NTNU -
Issued by TERENA SSL CA 3
About this certificate
This digital certificate with serial number 01:e1:56:fe:49:8f:b0:5d:c1:f5:78:2c:d8:95:e3:82 was issued on by TERENA.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
NORGES TEKNISK-NATURVITENSKAPELIGE UNIVERSITET NTNU
Organization:
NORGES TEKNISK-NATURVITENSKAPELIGE UNIVERSITET NTNU
Organization unit: IT
Organization unit: IT
Locality:
Trondheim
Country: NO
Country: NO
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): 01:e1:56:fe:49:8f:b0:5d:c1:f5:78:2c:d8:95:e3:82Serial Number (int): 2499259222900559731308852012188558210
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 6e:22:0f:23:8e:51:53:e4:2c:92:e1:56:67:88:41:4f:09:b3:60:40
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62
Fingerprint (sha1): d9:d4:51:f6:35:fb:43:7a:60:5b:7c:21:95:0b:5e:c8:4e:ca:62:e4
Fingerprint (sha256): 05:94:df:c3:99:87:b1:0d:a2:b9:9d:5d:3a:4d:70:01:1c:e3:2b:87:a3:6a:71:0f:c8:f5:1e:4d:86:47:19:26
Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl
Check the revocation status for certificate it-appssm02.it.ntnu.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for it-appssm02.it.ntnu.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
it-appssm02.it.ntnu.no
it-appssm02.win.ntnu.no
it-appssm02.win.ntnu.no
Other certificates including the domain name ntnu.no
(limited to 100 certificates)
ivt-ts1.ivt.ntnu.no
ioffice.ivt.ntnu.no
plantuml.stud.idi.ntnu.no
ntnu-mp.ntnu.no
webmail-dovecot.item.ntnu.no
cs.itea.ntnu.no
jupyter.item.ntnu.no
openstreetmap.it.ntnu.no
mediasite.ntnu.no
pbl.medisin.ntnu.no
pypimirror.it.ntnu.no
survey.svt.ntnu.no
wiki.math.ntnu.no
ntnu-mp.ntnu.no
rk.nvg.ntnu.no
elydia-test.it.ntnu.no
orgtest.it.ntnu.no
feeds.itea.ntnu.no
*.medisin.ntnu.no
www.nvg.ntnu.no
portus.it.ntnu.no
ida.it.ntnu.no
sokutv.it.ntnu.no
adm.ad.svt.ntnu.no
bloggtest.medisin.ntnu.no
rk.nvg.ntnu.no
wagtail.math.ntnu.no
hamp.medisin.ntnu.no
jupyter.indecol.ntnu.no
discoverertest.itea.ntnu.no
apitest.nice.ntnu.no
gribben.it.ntnu.no
www.math.ntnu.no
gloshaugen-vk.itea.ntnu.no
intercourse.ed.ntnu.no
uhskypepool02.uhad.no
ntnu-mp.ntnu.no
pingu.nvg.ntnu.no
alumni.ntnu.no
nettools.it.ntnu.no
rmservice.itea.ntnu.no
mopenid.item.ntnu.no
eksamensvedlegg.it.ntnu.no
ttm4175.iik.ntnu.no
q2s.ntnu.no
adfs.ntnu.no
rk.nvg.ntnu.no
ephweb-temp.it.ntnu.no
pwchange.it.ntnu.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
it-appssm02.it.ntnu.no
openstreetmap.it.ntnu.no
pakkesporing.it.ntnu.no
webmail.phys.ntnu.no
uhskypepool01.uhad.no
romres-test.itea.ntnu.no
soknadsweb.ntnu.no
syllabus.it.ntnu.no
spsts.it.ntnu.no
florat.ed.ntnu.no
www.hpc.ntnu.no
web01.ie.ntnu.no
apps.rmwin.itea.ntnu.no
secure.math.ntnu.no
www.math.ntnu.no
mediasite.ntnu.no
bamboo.it.ntnu.no
testdcboss.it.ntnu.no
ntnu-mp.ntnu.no
www.kit.ntnu.no
uhskypepool02.uhad.no
park-utv.it.ntnu.no
video.adm.ntnu.no
www.chemie.no
ovsys-prod.math.ntnu.no
ephelis.medisin.ntnu.no
www2.pvv.ntnu.no
back-up-rct.idi.ntnu.no
ibmrs02.ibm.ntnu.no
eddis.ie.ntnu.no
secure.math.ntnu.no
secure.math.ntnu.no
aleksaee.it.ntnu.no
sikkerhet.ntnu.no
ntnu-mp.ntnu.no
ovsys.math.ntnu.no
apidemo.it.ntnu.no
wwwutv.ntnu.no
pingu.nvg.ntnu.no
uhskypepool01.uhad.no
hugin.win.ntnu.no
intercourse.ed.ntnu.no
omegav.ed.ntnu.no
owncloud.item.ntnu.no
intern.svt.ntnu.no
svn.itea.ntnu.no
epay.it.ntnu.no
pyramiden.itea.ntnu.no
almaaslab.nt.ntnu.no
ioffice.ivt.ntnu.no
plantuml.stud.idi.ntnu.no
ntnu-mp.ntnu.no
webmail-dovecot.item.ntnu.no
cs.itea.ntnu.no
jupyter.item.ntnu.no
openstreetmap.it.ntnu.no
mediasite.ntnu.no
pbl.medisin.ntnu.no
pypimirror.it.ntnu.no
survey.svt.ntnu.no
wiki.math.ntnu.no
ntnu-mp.ntnu.no
rk.nvg.ntnu.no
elydia-test.it.ntnu.no
orgtest.it.ntnu.no
feeds.itea.ntnu.no
*.medisin.ntnu.no
www.nvg.ntnu.no
portus.it.ntnu.no
ida.it.ntnu.no
sokutv.it.ntnu.no
adm.ad.svt.ntnu.no
bloggtest.medisin.ntnu.no
rk.nvg.ntnu.no
wagtail.math.ntnu.no
hamp.medisin.ntnu.no
jupyter.indecol.ntnu.no
discoverertest.itea.ntnu.no
apitest.nice.ntnu.no
gribben.it.ntnu.no
www.math.ntnu.no
gloshaugen-vk.itea.ntnu.no
intercourse.ed.ntnu.no
uhskypepool02.uhad.no
ntnu-mp.ntnu.no
pingu.nvg.ntnu.no
alumni.ntnu.no
nettools.it.ntnu.no
rmservice.itea.ntnu.no
mopenid.item.ntnu.no
eksamensvedlegg.it.ntnu.no
ttm4175.iik.ntnu.no
q2s.ntnu.no
adfs.ntnu.no
rk.nvg.ntnu.no
ephweb-temp.it.ntnu.no
pwchange.it.ntnu.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
it-appssm02.it.ntnu.no
openstreetmap.it.ntnu.no
pakkesporing.it.ntnu.no
webmail.phys.ntnu.no
uhskypepool01.uhad.no
romres-test.itea.ntnu.no
soknadsweb.ntnu.no
syllabus.it.ntnu.no
spsts.it.ntnu.no
florat.ed.ntnu.no
www.hpc.ntnu.no
web01.ie.ntnu.no
apps.rmwin.itea.ntnu.no
secure.math.ntnu.no
www.math.ntnu.no
mediasite.ntnu.no
bamboo.it.ntnu.no
testdcboss.it.ntnu.no
ntnu-mp.ntnu.no
www.kit.ntnu.no
uhskypepool02.uhad.no
park-utv.it.ntnu.no
video.adm.ntnu.no
www.chemie.no
ovsys-prod.math.ntnu.no
ephelis.medisin.ntnu.no
www2.pvv.ntnu.no
back-up-rct.idi.ntnu.no
ibmrs02.ibm.ntnu.no
eddis.ie.ntnu.no
secure.math.ntnu.no
secure.math.ntnu.no
aleksaee.it.ntnu.no
sikkerhet.ntnu.no
ntnu-mp.ntnu.no
ovsys.math.ntnu.no
apidemo.it.ntnu.no
wwwutv.ntnu.no
pingu.nvg.ntnu.no
uhskypepool01.uhad.no
hugin.win.ntnu.no
intercourse.ed.ntnu.no
omegav.ed.ntnu.no
owncloud.item.ntnu.no
intern.svt.ntnu.no
svn.itea.ntnu.no
epay.it.ntnu.no
pyramiden.itea.ntnu.no
almaaslab.nt.ntnu.no
Certificate
The complete raw certificate details for it-appssm02.it.ntnu.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIQAeFW/kmPsF3B9Xgs2JXjgjANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0xOTAzMTUwMDAwMDBaFw0yMTAzMTkxMjAwMDBaMIGNMQswCQYDVQQG EwJOTzESMBAGA1UEBxMJVHJvbmRoZWltMTwwOgYDVQQKEzNOT1JHRVMgVEVLTklT Sy1OQVRVUlZJVEVOU0tBUEVMSUdFIFVOSVZFUlNJVEVUIE5UTlUxCzAJBgNVBAsT AklUMR8wHQYDVQQDExZpdC1hcHBzc20wMi5pdC5udG51Lm5vMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHsrGFw8K1mvC+SRU4OBJUOOvf3U0mDAKv0M iuy28drwCIE5kPIi6tocEXQ+blxHBu+YeXLHMk4dBO9hOLg5CctYNoS64t54h8Dh e1m7t7X7NmAbl6+rK9x6dvUwURzkm3ilocrxblItBqLbYpRLRMcfaqNLLqL0920a AUsuGJaG77oCKbtjf+wr8PZT65nP+7u5kuuNsKYb28vTLVGD6/UDBhwBjRmsSEOI QgDEK22rzzgsJp/eehXguBv9YaMtLOWZc5H3GsLbAoVMKLwR4JxwaudddBsdAe41 TW/MYeHd1lkbuPx6MD0x8NqohlYiMZw3o3N4KD0kuu6fBog8ZwIDAQABo4IB/TCC AfkwHwYDVR0jBBgwFoAUZ/2IIBQnmMcJ0iUZu+lREWN1UGIwHQYDVR0OBBYEFG4i DyOOUVPkLJLhVmeIQU8Js2BAMDoGA1UdEQQzMDGCFml0LWFwcHNzbTAyLml0Lm50 bnUubm+CF2l0LWFwcHNzbTAyLndpbi5udG51Lm5vMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4Yp aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcmwwL6AtoCuG KWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3JsMEwGA1Ud IARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp Z2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG4GCCsGAQUFBwEBBGIwYDAkBggrBgEF BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDgGCCsGAQUFBzAChixodHRw Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNydDAMBgNVHRMB Af8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+ 15lkdXe1Ot7jJgjcGrlAjz4vFrd0GyFiOpUtfjAg7Z/Qqdn93xkWUrBghns8F/XC 5EcUvcFOSmeb2v/bVq94Zs/BtStxRIGSQhSXRXJmTnEe4j3UKeXUjaELthSK/9Al QlJ6HnuBQfuUc37+wWrz/UHYwo6q3z5aAgAtgInKLwUucQFSmvxElSTw++O5beCk m7TpkLTTpSY2tqcb5A73Mx1u0UFrxeD60BblwRljhReumWCvTQ5Sn7kl3sEe8els cL6/+5o4OXkZZZMLrZiQ1XBk6aOmH14Kg8+nq8OPBqEzW8iBdYJ4ERZUXW8fuiYd iVbrEAp+AOq5g9pmNLow -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHsrGFw8K1mvC+SRU4OB JUOOvf3U0mDAKv0Miuy28drwCIE5kPIi6tocEXQ+blxHBu+YeXLHMk4dBO9hOLg5 CctYNoS64t54h8Dhe1m7t7X7NmAbl6+rK9x6dvUwURzkm3ilocrxblItBqLbYpRL RMcfaqNLLqL0920aAUsuGJaG77oCKbtjf+wr8PZT65nP+7u5kuuNsKYb28vTLVGD 6/UDBhwBjRmsSEOIQgDEK22rzzgsJp/eehXguBv9YaMtLOWZc5H3GsLbAoVMKLwR 4JxwaudddBsdAe41TW/MYeHd1lkbuPx6MD0x8NqohlYiMZw3o3N4KD0kuu6fBog8 ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2499259222900559731308852012188558210 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trondheim' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NORGES TEKNISK-NATURVITENSKAPELIGE UNIVERSITET NTNU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'it-appssm02.it.ntnu.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18744005707339851142679211310746903255698651141899506206199537695435857132396346081082928596358874162817400111479489610379640973959441385590477941873357561741693394136767752965507329283957146486990566202898325946551303281175106075710913076805330847244463769136470617241848332135098952174087106169942078574984732781396610055270231004070825252926033825987931341786922430883213677970680378688394106097896848580740797713747253078948980992412775939621196985225355184686251653569577880636480793362549171166968616009831743189040216495560013129530681487057438339265882965565504496410267418219719735993659149555069750002334823 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e220f238e5153e42c92e1566788414f09b36040 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-appssm02.it.ntnu.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-appssm02.win.ntnu.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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