contrabajo.it.uc3m.es

- Universidad Carlos III de Madrid -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 02:a1:ca:e1:30:b5:03:ad:c5:29:57:9f:9b:77:2f:96 was issued on by TERENA.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universidad Carlos III de Madrid

Organization: Universidad Carlos III de Madrid
State / Province: Comunidad de Madrid
Locality: Leganés
Country: ES

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a1:ca:e1:30:b5:03:ad:c5:29:57:9f:9b:77:2f:96
Serial Number (int): 3498530673944555758270587304349740950
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 1b:dc:2d:a5:64:e1:df:47:6e:e5:79:d6:14:19:b5:04:e0:fc:4e:d4
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 1e:52:c3:77:50:1f:20:03:72:bd:f2:2f:d9:54:ce:c7:fa:7a:d8:bb
Fingerprint (sha256): 06:44:88:b4:64:1d:10:fc:d4:b6:8d:7d:3d:12:7e:f7:f2:16:c9:16:e8:bc:b3:00:bd:a8:20:21:01:42:66:e9

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate contrabajo.it.uc3m.es

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for contrabajo.it.uc3m.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

contrabajo.it.uc3m.es
www.it.uc3m.es
ew2.it.uc3m.es
jtr2009.it.uc3m.es
labgamm.it.uc3m.es
labgastt.it.uc3m.es
nettec.it.uc3m.es
webtlab.it.uc3m.es

Other certificates including the domain name uc3m.es

(limited to 100 certificates)
codeboard.gast.it.uc3m.es
gauss.uc3m.es
vivo-clon.uc3m.es
residencias.fund.uc3m.es
aulaglobal.uc3m.es
ac2.arcos.inf.uc3m.es
correo.lab.inf.uc3m.es.uc3m.es
aulavirtual.uc3m.es
vciberlab2.lab.it.uc3m.es
marcajes.aig.uc3m.es
redes.uc3m.es
zabbix.uc3m.es
uxxip.uc3m.es
gitlab.it.uc3m.es
www.uc3m.es
asrob.uc3m.es
oslo.aig.uc3m.es
nuberu.uc3m.es
expeleganes.uc3m.es
lightningguide.net
becasalumni.fund.uc3m.es
test.colegiosmayores.fund.uc3m.es
delegacion.uc3m.es
grey.busha.co
nuberu.uc3m.es
labarciot.lab.it.uc3m.es
netcom.it.uc3m.es
nuberu.uc3m.es
contrabajo.it.uc3m.es
sede.uc3m.es
aplicaciones.uc3m.es
arcamm.uc3m.es
u21.uc3m.es
media.uc3m.es
spoc.uc3m.es
voremetur.uc3m.es
rm.uc3m.es
listserv.uc3m.es
salasbib.uc3m.es
cubo.uc3m.es
arcamm.uc3m.es
sede.uc3m.es
testaplicaciones.uc3m.es
aulavirtual.uc3m.es
listserv.uc3m.es
gescm.fund.uc3m.es
titan.softlab.uc3m.es
web.softlab.uc3m.es
blog.swa.sel.inf.uc3m.es
s3newscoop.uc3m.es
dyfee.uc3m.es
plato.it.uc3m.es
gp.uc3m.es
congrega.fund.uc3m.es
aulaglobal.uc3m.es
app.my-guitar-tabs.com
cas-media.uc3m.es
podcast.uc3m.es
sparrow.arcos.inf.uc3m.es
flautin.it.uc3m.es
janacek.uc3m.es
ametrics.it.uc3m.es
luciernaga.it.uc3m.es
mailserver.fund.uc3m.es
tamtam.it.uc3m.es
aulavirtual.uc3m.es
sigma-test.uc3m.es
strauss.uc3m.es
nfsen.uc3m.es
sdi.uc3m.es
trompa.it.uc3m.es
uxxi.uc3m.es
repositorio.lab.inf.uc3m.es.uc3m.es
www.uc3m.es
mediasite.uc3m.es
sede.uc3m.es
correong.uc3m.es
5gtours.netcom.it.uc3m.es
mastersonlineempresa.uc3m.es
seldata.sel.inf.uc3m.es
strauss.uc3m.es
zabix.uc3m.es
graficadb.uc3m.es
berlioz.uc3m.es
*.dei.inf.uc3m.es
blog.swa.sel.inf.uc3m.es
cursosoye.fund.uc3m.es
contrabajo.it.uc3m.es
auth-test.uc3m.es
alumnos.uc3m.es
asrob.uc3m.es
mid.uc3m.es
ocs.uc3m.es
venus.softlab.uc3m.es
oslo.aig.uc3m.es
predls.uc3m.es
asrob.uc3m.es
xwodan.uc3m.es
pa5220g.uc3m.es
mediasite.uc3m.es

Certificate

The complete raw certificate details for contrabajo.it.uc3m.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHxzCCBq+gAwIBAgIQAqHK4TC1A63FKVefm3cvljANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0yMDAyMDYwMDAwMDBaFw0yMjA1MTEwMDAwMDBaMIGJMQswCQYDVQQG
EwJFUzEcMBoGA1UECBMTQ29tdW5pZGFkIGRlIE1hZHJpZDERMA8GA1UEBwwITGVn
YW7DqXMxKTAnBgNVBAoTIFVuaXZlcnNpZGFkIENhcmxvcyBJSUkgZGUgTWFkcmlk
MR4wHAYDVQQDExVjb250cmFiYWpvLml0LnVjM20uZXMwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDBsp/fQfADIcUlBFLHEiyzMUV36iLtamiXbMQhpXmj
HQct/+17FMhiZlLX0p5Gm/bIKdR/4kVSRGJPBzrehByIB6iiGeaP2A4OOTXAoTv7
6aycQlnNuKw+2UWNFtdw8QmLPym1kqaIGHMTFeztFI1smAd7mlNq+oTkwvDSZ0/u
Cer7+nAA2TRbW+d/265zbrWM9uyttxoQ2KASNY1FL9szjTaQ3Yd2PiNkXmSIzBdw
7ZZOrPPsRQ1TEz0NNmwy593VJaB5E0sGZlPJ7DBXGTdgW71QQLpVTBElbSBPuinb
bvX7RxZk8nsuVKnCRvI0IqxKCa3IIZpi+VZyjWOWhAVZAgMBAAGjggRNMIIESTAf
BgNVHSMEGDAWgBRn/YggFCeYxwnSJRm76VERY3VQYjAdBgNVHQ4EFgQUG9wtpWTh
30du5XnWFBm1BOD8TtQwgaYGA1UdEQSBnjCBm4IVY29udHJhYmFqby5pdC51YzNt
LmVzgg53d3cuaXQudWMzbS5lc4IOZXcyLml0LnVjM20uZXOCEmp0cjIwMDkuaXQu
dWMzbS5lc4ISbGFiZ2FtbS5pdC51YzNtLmVzghNsYWJnYXN0dC5pdC51YzNtLmVz
ghFuZXR0ZWMuaXQudWMzbS5lc4ISd2VidGxhYi5pdC51YzNtLmVzMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQw
YjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5j
cmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMu
Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBz
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG4GCCsGAQUFBwEBBGIw
YDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDgGCCsGAQUF
BzAChixodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNy
dDAMBgNVHRMBAf8EAjAAMIIB9AYKKwYBBAHWeQIEAgSCAeQEggHgAd4AdQCkuQmQ
tBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAXAZcyj6AAAEAwBGMEQCIBJ1
x1pz7E2pWpgCqEUhqt7QPfGKupGqGstqnykKDm3IAiAGkidh7+ehUdUsnvX0UPcM
KHmI6olvOAXdVPS08/oCyQB2ACJFRQdZVSRWlj+hL/H3bYbgIyZjrcBLf13Gg1xu
4g8CAAABcBlzKUkAAAQDAEcwRQIgbfAwGDwsxmzp9nY23LMnyunUWwAZNdFsutkp
L/oEvv0CIQCZ17s9Aip5jMDQNuF48OcESlz4pwFCjW4jU4bBMsuwMgB1AFGjsPX9
AXmcVm24N3iPDKR6zBsny/eeiEKaDf7UiwXlAAABcBlzKXQAAAQDAEYwRAIgZbq1
XuRuagUXDL2o/TEJXQuOBSQn5zYSDBjBgu83mWACIDumzRZFJ8L98PKtNFG6EP3j
0FKCOAlElQ3plOr+icO4AHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKW
BvYAAAFwGXMouAAABAMARzBFAiBBrw7hgTgvNnSy7QcNe/vcDpMzopc2ARroaYoq
yrpQhQIhALSzBJGqgF0OtQHe1AloNX19E8x/VjVA8FOhVfN9jGvlMA0GCSqGSIb3
DQEBCwUAA4IBAQAdRx2UIcHFEgCauIUO20s3zzVpUwfCBzMxSV3zWNwA7qKsyvlp
wnz8FydOK/KqTVYR5ae6ZOl/zGRLAnT7DP3Jyk6Tkq3Ytn5zKzXzmK4JzxOreRwa
SsM4iMajaCkYRKzfxKt5+gLrI2eMptBCSFc7+2gGjiqyYc6knfqgZb+DyBmp4mVF
AKHxlWaHM3Kb5b8XUdtyUgM5MEtD3NsWVjIMVwZTqC52CzS6Qzs8uHfyoMO0wiuQ
+SBNplM9chLYHfk9tTGYHnzGDMSQQOE8a/7QmUfUjpMaA0IWkDb23t+T62uAxEHe
/N1WoD+HCk5dsTCd495AFTcCEGd3wDjnOa5y
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbKf30HwAyHFJQRSxxIs
szFFd+oi7Wpol2zEIaV5ox0HLf/texTIYmZS19KeRpv2yCnUf+JFUkRiTwc63oQc
iAeoohnmj9gODjk1wKE7++msnEJZzbisPtlFjRbXcPEJiz8ptZKmiBhzExXs7RSN
bJgHe5pTavqE5MLw0mdP7gnq+/pwANk0W1vnf9uuc261jPbsrbcaENigEjWNRS/b
M402kN2Hdj4jZF5kiMwXcO2WTqzz7EUNUxM9DTZsMufd1SWgeRNLBmZTyewwVxk3
YFu9UEC6VUwRJW0gT7op2271+0cWZPJ7LlSpwkbyNCKsSgmtyCGaYvlWco1jloQF
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3498530673944555758270587304349740950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-11 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comunidad de Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leganés'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universidad Carlos III de Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'contrabajo.it.uc3m.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24452075882490958583280875170676143437356621179136239127436544970669894295009934970868118388574745591730779194240093468472600749174626130355000355194844712073617760230658203228154233537622950197080621561394941511027116868949898828375635407081335935156336938035776756409941613131077074597664573215741656412294338149230142004221018542114137370393018778026941520830671048818659682154701642125994603856632968882511595225277470865719673339868354018735759590324728280119895860995276561333946605259689770083309295032962470816566018717957577906454757793691368897117361182635398251373726482961559844051290719207115394293957977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bdc2da564e1df476ee579d61419b504e0fc4ed4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrabajo.it.uc3m.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.uc3m.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew2.it.uc3m.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jtr2009.it.uc3m.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labgamm.it.uc3m.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labgastt.it.uc3m.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nettec.it.uc3m.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtlab.it.uc3m.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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