jureshareszcsek.ju.se
- Jönköping University -
Issued by TERENA SSL High Assurance CA 3
About this certificate
This digital certificate with serial number 07:58:9a:3a:a4:5e:ab:32:e1:21:f0:b0:f0:25:df:8a was issued on by TERENA.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Jönköping University
Company registration number:
Government Entity
Organization: Jönköping University
Organization unit: IT-Service
Organization: Jönköping University
Organization unit: IT-Service
Locality:
Jönköping
Country: SE
Country: SE
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): 07:58:9a:3a:a4:5e:ab:32:e1:21:f0:b0:f0:25:df:8aSerial Number (int): 9764646231227853227186854184775704458
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 33:d4:d0:c6:53:4a:45:0f:60:fa:7a:51:10:20:13:47:2c:b3:91:4b
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9
Fingerprint (sha1): 86:0d:a6:1a:0e:1e:84:97:da:04:f2:4d:d8:b4:d3:f0:c5:b5:f9:61
Fingerprint (sha256): 06:53:5f:ce:52:4d:71:c3:bb:99:64:f6:42:2b:d2:60:df:34:a6:a3:0c:34:bf:09:60:64:17:82:20:56:45:25
Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl
Check the revocation status for certificate jureshareszcsek.ju.se
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jureshareszcsek.ju.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jureshareszcsek.ju.se
jureshare.ju.se
reshare.ju.se
szc02.win.hj.se
szc02.ad.hj.se
jureshare.ju.se
reshare.ju.se
szc02.win.hj.se
szc02.ad.hj.se
Other certificates including the domain name ju.se
(limited to 100 certificates)
jusv1.hj.se
jumobile.ju.se
vdi-director.ju.se
adfs.ju.se
vfu.hj.se
manage.ju.se
prime.ju.se
projweb1.hj.se
idp.hj.se
test.play.hj.se
pingpong.ju.se
play.hj.se
jureshareszcsek.ju.se
adfs.ju.se
academ-dev.ju.se
alumni.ju.se
devsrvl2.ju.se
ladok.ju.se
ju.se
ad.hj.se
vdi-director.ju.se
kronox.hj.se
happy.ju.se
accommodation.hj.se
ju-print-dev.ju.se
windreamsrv.win.hj.se
kas.win.hj.se
yh.hj.se
www.ju.se
yh.ju.se
projweb.hj.se
kronox.hj.se
ask.library.ju.se
zcentral.ju.se
caneaone.win.hj.se
kas.win.hj.se
prime.ju.se
msv1.hj.se
lpw.hj.se
adfs.ju.se
payman.hj.se
account.win.hj.se
devblog.library.ju.se
agrprod-web.win.hj.se
bliss.hj.se
gitlab.hj.se
ju-print.ju.se
kas.win.hj.se
adfs.ju.se
www.ju.se
projweb.hj.se
kronox.hj.se
julia.library.ju.se
styr.hj.se
ju.se
dev.play.hj.se
account.win.hj.se
idp.hj.se
*.proxy.library.ju.se
dev.play.hj.se
pingpong.ju.se
academ-dev.ju.se
cmgsync.ju.se
api.ju.se
ieweb1.hj.se
pis.ju.se
flex.hj.se
jureshare.ju.se
webmail.hj.se
pingpong.ju.se
ad.hj.se
kursweb.win.hj.se
devblog.library.ju.se
projweb.hj.se
idp.hj.se
iesv4.hj.se
canvas.hj.se
mim.win.hj.se
dex.hj.se
devsrvl2.ju.se
napalmtest.hj.se
student.list.ju.se
ladokweb.win.hj.se
idp.hj.se
napalm.hj.se
kursinfo.hj.se
play.hj.se
vfu.win.hj.se
sip.ju.se
advance.ju.se
devsrvl2.ju.se
juadfs01.win.hj.se
ad.hj.se
lpw.hj.se
www.hj.se
ju-print.ju.se
ju.se
ym.ju.se
alumni.ju.se
jusv1.hj.se
jumobile.ju.se
vdi-director.ju.se
adfs.ju.se
vfu.hj.se
manage.ju.se
prime.ju.se
projweb1.hj.se
idp.hj.se
test.play.hj.se
pingpong.ju.se
play.hj.se
jureshareszcsek.ju.se
adfs.ju.se
academ-dev.ju.se
alumni.ju.se
devsrvl2.ju.se
ladok.ju.se
ju.se
ad.hj.se
vdi-director.ju.se
kronox.hj.se
happy.ju.se
accommodation.hj.se
ju-print-dev.ju.se
windreamsrv.win.hj.se
kas.win.hj.se
yh.hj.se
www.ju.se
yh.ju.se
projweb.hj.se
kronox.hj.se
ask.library.ju.se
zcentral.ju.se
caneaone.win.hj.se
kas.win.hj.se
prime.ju.se
msv1.hj.se
lpw.hj.se
adfs.ju.se
payman.hj.se
account.win.hj.se
devblog.library.ju.se
agrprod-web.win.hj.se
bliss.hj.se
gitlab.hj.se
ju-print.ju.se
kas.win.hj.se
adfs.ju.se
www.ju.se
projweb.hj.se
kronox.hj.se
julia.library.ju.se
styr.hj.se
ju.se
dev.play.hj.se
account.win.hj.se
idp.hj.se
*.proxy.library.ju.se
dev.play.hj.se
pingpong.ju.se
academ-dev.ju.se
cmgsync.ju.se
api.ju.se
ieweb1.hj.se
pis.ju.se
flex.hj.se
jureshare.ju.se
webmail.hj.se
pingpong.ju.se
ad.hj.se
kursweb.win.hj.se
devblog.library.ju.se
projweb.hj.se
idp.hj.se
iesv4.hj.se
canvas.hj.se
mim.win.hj.se
dex.hj.se
devsrvl2.ju.se
napalmtest.hj.se
student.list.ju.se
ladokweb.win.hj.se
idp.hj.se
napalm.hj.se
kursinfo.hj.se
play.hj.se
vfu.win.hj.se
sip.ju.se
advance.ju.se
devsrvl2.ju.se
juadfs01.win.hj.se
ad.hj.se
lpw.hj.se
www.hj.se
ju-print.ju.se
ju.se
ym.ju.se
alumni.ju.se
jusv1.hj.se
Certificate
The complete raw certificate details for jureshareszcsek.ju.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgIQB1iaOqReqzLhIfCw8CXfijANBgkqhkiG9w0BAQsFADBz MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExJzAlBgNVBAMTHlRFUkVOQSBTU0wg SGlnaCBBc3N1cmFuY2UgQ0EgMzAeFw0xOTAxMjgwMDAwMDBaFw0yMTAyMDExMjAw MDBaMIHGMRowGAYDVQQPDBFHb3Zlcm5tZW50IEVudGl0eTETMBEGCysGAQQBgjc8 AgEDEwJTRTEaMBgGA1UEBRMRR292ZXJubWVudCBFbnRpdHkxCzAJBgNVBAYTAlNF MRQwEgYDVQQHDAtKw7Zua8O2cGluZzEfMB0GA1UECgwWSsO2bmvDtnBpbmcgVW5p dmVyc2l0eTETMBEGA1UECxMKSVQtU2VydmljZTEeMBwGA1UEAxMVanVyZXNoYXJl c3pjc2VrLmp1LnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3GI BRz70TJda1NSMGxWzpUv2w3ej5TFhoExfUCJ7/sAeKydn+5LdqniqU3HI4USiAwm ZkJIBexeTx59lm83xGo4jLqrKvNuaAOF7q69/uKmjMx2peCAf7sTk+3ZCBRvWmEr HWyxwNbiHArGWm9n0nhsteZ80lWziN7ZzhEH9i73WtDncsZiVOTNjRi62fDMUkeA CMmkZmtJos+mStR73uM40l5U8Qo0vNhAF5Y+G3zZ1myZr7n6tNgW8UEf4gOtM20r iVHyHwvBson9yk+k8rEyABELDwlMKrXq/TqJutx74R9EqHiG2ANnCQkKun0CPPpe YDk2y7Zy2rtH3vRuvwIDAQABo4ICSzCCAkcwHwYDVR0jBBgwFoAUwriF1+G5E73R SLz9Xtx9kEJ6iqkwHQYDVR0OBBYEFDPU0MZTSkUPYPp6URAgE0css5FLMGEGA1Ud EQRaMFiCFWp1cmVzaGFyZXN6Y3Nlay5qdS5zZYIPanVyZXNoYXJlLmp1LnNlgg1y ZXNoYXJlLmp1LnNlgg9zemMwMi53aW4uaGouc2WCDnN6YzAyLmFkLmhqLnNlMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgYUG A1UdHwR+MHwwPKA6oDiGNmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9URVJFTkFT U0xIaWdoQXNzdXJhbmNlQ0EzLmNybDA8oDqgOIY2aHR0cDovL2NybDQuZGlnaWNl cnQuY29tL1RFUkVOQVNTTEhpZ2hBc3N1cmFuY2VDQTMuY3JsMEsGA1UdIAREMEIw NwYJYIZIAYb9bAIBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0 LmNvbS9DUFMwBwYFZ4EMAQEwewYIKwYBBQUHAQEEbzBtMCQGCCsGAQUFBzABhhho dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRQYIKwYBBQUHMAKGOWh0dHA6Ly9jYWNl cnRzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xIaWdoQXNzdXJhbmNlQ0EzLmNydDAM BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBx+0OyrSWdI1BB3axycLhOOG338hDN25I78SdHxsQmU78u6XF6zD9CuUse 8ro8EaYPZBdOnAftXwF/Z/nvMTyKM9DeDMbLsbGpPnmkckqVSfdgwueVtNyjC190 NctTWAoIOyBbw02gZI/nC92dCMWoqsiub0lv6cYeuo80dBZ1reoDOvrEpV5ZgjA5 CRpl51q0BzynkssTopUhXiAHdkjek/WNDeU/eJkrc2j4rQpi8+gLP7WDl33iCD68 UBc6rHuIiFLRwHvGD7/cS+jg1UmaS3DnuBKgGCEL9bm5+LjG455T5WomfJ+bQ+fd diEwB0tMS+HqAxAhIeab4W2RWPnl -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3GIBRz70TJda1NSMGxW zpUv2w3ej5TFhoExfUCJ7/sAeKydn+5LdqniqU3HI4USiAwmZkJIBexeTx59lm83 xGo4jLqrKvNuaAOF7q69/uKmjMx2peCAf7sTk+3ZCBRvWmErHWyxwNbiHArGWm9n 0nhsteZ80lWziN7ZzhEH9i73WtDncsZiVOTNjRi62fDMUkeACMmkZmtJos+mStR7 3uM40l5U8Qo0vNhAF5Y+G3zZ1myZr7n6tNgW8UEf4gOtM20riVHyHwvBson9yk+k 8rEyABELDwlMKrXq/TqJutx74R9EqHiG2ANnCQkKun0CPPpeYDk2y7Zy2rtH3vRu vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9764646231227853227186854184775704458 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-01 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jönköping' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jönköping University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT-Service' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jureshareszcsek.ju.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22652640973338479818019941003810691073751091170028438127664049890895523130312700622160403336222863443725370641919584191378844105867278893785526203659677696597602212454551540369733976496356033728353605360590880869911976723481078498203169679618402071135151026789038824310588842188634845988848481665119443453336386420320873423801802895031079334621863533309528333433347044818809907797235169511571924678170556440003029879089317454589319647832591947000682690269976188017965218355689436901076212179481351128077390997994773634567097690226730284608923259031164844626259072800815757879312346532671321708255297533660939318226623 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33d4d0c6534a450f60fa7a51102013472cb3914b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jureshareszcsek.ju.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jureshare.ju.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshare.ju.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szc02.win.hj.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szc02.ad.hj.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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