www.pp1.tudelft.nl

- Technische Universiteit Delft -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 06:05:af:63:bf:af:51:7c:75:8c:da:32:e9:b0:a6:bc was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Delft

Organization: Technische Universiteit Delft
Locality: Delft
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 06:05:af:63:bf:af:51:7c:75:8c:da:32:e9:b0:a6:bc
Serial Number (int): 8004886783594481031920338097788724924
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 83:e5:7e:85:8c:74:f9:76:93:de:b8:68:5c:94:cf:46:eb:13:a5:9b
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): cf:0d:4c:ec:8a:56:fc:df:4f:cc:bd:24:50:1c:57:31:07:da:fd:9b
Fingerprint (sha256): 06:c9:83:ac:3a:d4:82:e8:91:be:a5:71:c7:1e:c0:10:d7:4f:5d:50:7c:30:46:04:9b:be:85:c9:bc:44:92:ad

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate www.pp1.tudelft.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pp1.tudelft.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pp1.tudelft.nl
pp1.tudelft.nl

Other certificates including the domain name tudelft.nl

(limited to 100 certificates)
solidstate.quantumtinkerer.tudelft.nl
api.p-cube.gamelab-staging.tbm.tudelft.nl
bepsys.ewi.tudelft.nl
webdsl-org.ewi.tudelft.nl
talentservices.tudelft.nl
wism8.dunet.tudelft.nl
www.pp1.tudelft.nl
suslabnwe-en.io.tudelft.nl
eipdev.ewi.tudelft.nl
quantumtinkerer.tudelft.nl
www.hooke.tudelft.nl
mattermost-imphys.tudelft.nl
3d.bk.tudelft.nl
hpcwiki.tudelft.nl
suslabnwe-de.io.tudelft.nl
externenmds.tudelft.nl
webdsl-2015.ewi.tudelft.nl
telefoonboek.tudelft.nl
searchenginewis2.ewi.tudelft.nl
se.ewi.tudelft.nl
ipms-prd1.tudelft.nl
bitrix24.tbm.tudelft.nl
punch.tudelft.nl
oauth-t.tudelft.nl
inforln.tudelft.nl
3d.bk.tudelft.nl
bktoi1.bk.tudelft.nl
abdowiki.tudelft.nl
www.broach.nl
webapp.tudelft.nl
demoprojects.tudelft.nl
telewerken.tudelft.nl
pl-jenkins.ewi.tudelft.nl
bbtest.tudelft.nl
marsrv.tudelft.nl
4tudata-libbuild.tudelft.nl
inforln.tudelft.nl
mod-est.tbm.tudelft.nl
coin2013-prima.tudelft.nl
syllabus.tudelft.nl
aecoderunner.lr.tudelft.nl
erfgoed.tudelft.nl
www.civielebedrijvendagen.nl
was.tudelft.nl
sysadminwiki.tudelft.nl
esb-gateway.tudelft.nl
www.vvtp.tudelft.nl
services.sc.tudelft.nl
3d.bk.tudelft.nl
campusdevelopment.tudelft.nl
marsrv.tudelft.nl
svn.3me.tudelft.nl
lamp6.tudelft.nl
svn.tnw.tudelft.nl
www.dined.nl
dutmail.tudelft.nl
b2bcrm.tudelft.nl
www.nas.ewi.tudelft.nl
b2bcrm.tudelft.nl
qutech.tudelft.nl
personeelsdossiers.tudelft.nl
zandmotor-libtest.tudelft.nl
www.beeldportal.tudelft.nl
labservant.tudelft.nl
lampict2.tudelft.nl
coursemaptest.tudelft.nl
se.ewi.tudelft.nl
presto.tudelft.nl
3d.bk.tudelft.nl
www.punch.tudelft.nl
reservation.ekl.tudelft.nl
qit.ewi.tudelft.nl
elearning-libprod.tudelft.nl
www.praktischestudie.nl
handler.tudelft.nl
matchmakers.ewi.tudelft.nl
newmediacentre.tudelft.nl
burgerbegroting.tbm.tudelft.nl
www.broach.nl
ismir2019.ewi.tudelft.nl
sg-4.tbm.tudelft.nl
srv775-2.tudelft.net
www.dcsc.tudelft.nl
ppm1.tudelft.nl
lts1-test.tbm.tudelft.nl
inclusivedesign.io.tudelft.nl
visit.tudelft.nl
eurasipdev.ewi.tudelft.nl
ei.tudelft.nl
elearning-libaccp.tudelft.nl
www.practischestudie.nl
api.myota-test.tudelft.nl
svn.bk.tudelft.nl
gnss1.tudelft.nl
luistermutant.gamelab.tbm.tudelft.nl
filr.tudelft.nl
trendhost-cb.tudelft.nl
www.punch.tudelft.nl
research.tudelft.nl
osidoc.tudelft.nl

Certificate

The complete raw certificate details for www.pp1.tudelft.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrTCCBpWgAwIBAgIQBgWvY7+vUXx1jNoy6bCmvDANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xOTA1MDgwMDAwMDBaFw0yMTA1MTIxMjAwMDBaMGIxCzAJBgNVBAYT
Ak5MMQ4wDAYDVQQHEwVEZWxmdDEmMCQGA1UEChMdVGVjaG5pc2NoZSBVbml2ZXJz
aXRlaXQgRGVsZnQxGzAZBgNVBAMTEnd3dy5wcDEudHVkZWxmdC5ubDCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAOah95K7CngEfwToRo4dsHiL3MyFoibc
ih5i3rpc/d6Pw1wfz/JtZRR+d3L0E86tqAYG0IXiRBJUdMdmJXjFkj2wl/ed05RR
nqh7RYZt38fqXgGezqfE3x+jB2t++ufwYoc+X7rVbdbjusTUuTHqPGzn2fb8sTqW
l5ojT82Ndh05tUxF1Sr7DIuQRJbeF/q+1Fv26slUmNJTCc9XueNPWqecdAekS9Bp
fIiYhLiOWauaih/nAtR2PkVPEKCJJy7cMcKGe5LS1E2J+YjqpmM66S+x5jaOi2Sj
BySYF03HPQPgW89TlfLCaWQYsfciEDuGe5HfXXBAC7Ky/go0hxGyOHMuRSETfpJz
q2FI1jbbvzQlUI6FW4kc2Mfxhtrxxcl7ZO7O1N/6zmos9uH8eHo0R0cANaKvm8Lw
aRW9zIv3/zVXfoPC8yUw4GXA4RWgwWy71VVUDopiYf1YaDIt93kdQqMvrrH6mVRY
OT8G/CTo5DfxZNRs7zi/RzJfGj7pIu8UqTcl6Hs5bcK1u6/cbMeI/GEEw/IFPc1O
n8QUzeQT9fkJuSZ3puc8Fjq2k3SvlW2haq4FYalFPJqPcIKyBtrshAnPZhRX0P7i
ldTobecwkL5OJ03NGN1SBEmZfsTwpe7osaj0RhBQTmfG2sys749uNjRbHwyQlMz1
yGSoZhlIVFqRAgMBAAGjggNbMIIDVzAfBgNVHSMEGDAWgBRn/YggFCeYxwnSJRm7
6VERY3VQYjAdBgNVHQ4EFgQUg+V+hYx0+XaT3rhoXJTPRusTpZswLQYDVR0RBCYw
JIISd3d3LnBwMS50dWRlbGZ0Lm5sgg5wcDEudHVkZWxmdC5ubDAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIw
L6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3Js
MC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNy
bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczov
L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjBuBggrBgEFBQcBAQRiMGAw
JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA4BggrBgEFBQcw
AoYsaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcnQw
DAYDVR0TAQH/BAIwADCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUApLkJkLQY
WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFqljFVogAABAMARjBEAiBqZIFD
Gf3PuKVGljYueH3C+xv7vOjeBpWNCxVqlJNKlwIgEJwBMRqkEI9pvEJ8n8cI6awd
b9/4jl1N1Dy9T11oad8AdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCD
DwAAAWqWMVa6AAAEAwBGMEQCIALqk4oE6058QiGnfr9nfXtZGWQ13itVLBD0bp22
ZC9kAiAin3343wh5Ll8hZ+miLd9g3SYidohhc35YCw1fc0z4sAB2AESUZS6w7s6v
xEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABapYxVTsAAAQDAEcwRQIgLELVCyTT
qwoQkCyvSCK+uI3PFVAmD7jPjlaw/2e3rbUCIQCypBwN3wIukr2evEARvhCnzG0N
DMvmoppdmU0nmtRsTjANBgkqhkiG9w0BAQsFAAOCAQEAUjrXwXRpCNT9K5Yanlqz
DKABtQ/YgE9xp3gyiVWtZE4HliKM0glgcXB4kXXKvdxfyqYeg69ha47jESApvb9Y
VO6DVpZG4aMH0Dfvzy8MDaUFwGc/D8ZWlbEpZZ1jsW4DvmYhRr47v5DaWVtL1qTF
1LXZBjjHcgztATAJzyeOFHk6hQfU9uavBvZGg9km7jNnTXegfRc/9U9QpCCru7cb
Y8fdvFbmrEN+Ch8/Xr47NMJForlC5WKMwtVrM9Iumq/Igf3xzVV2Nz3vxn3t9bkv
AsgmyFrgAzekNk8wV4L9FgqlNekM+g6zQvuaMa3YLjrxDpGdrzYF97f1YOd3yG1o
xQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8004886783594481031920338097788724924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pp1.tudelft.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940899260832429831066345873999831285649184932800184791615239731287640618753741436202158514934689449232027193692370521823380809784578537756815976398347811569900832803499476094128731031813470509481688087929569532287606979194286783294786171026574366625714178748957330001465243813441599177410241664156135251654467214005368525400318376943947791001102381991040055197686455501403811038114302454367778256071897089251270384881267692551318224171452442945977778398305636432512900264334905624970819621089936069770391635515129390548341605919056454300675890237439250385771215645258818354788366177814306952891887527176543733813873206508414956633935842785049484157341012641767182021836012515793298678819103390170990057301571991114580602769116308252653365385329980727295963156917573527504482354245740370140079313664778304304405310068350189874363752950362768518689402314332175266504732661726642791459209161326615961639658111208630171228636576650467009705152218992205590667710334762410813487458311261305706442146122916354450579599120676101300671492786815756467092596590990659107187893223215865456714863092257245958933171761534534504483211575101552976073821607073290172260248882962405702098009257377338799266956506886878382944333594856916320181212699281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83e57e858c74f97693deb8685c94cf46eb13a59b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pp1.tudelft.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp1.tudelft.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a963155a2000004030046304402206a64814319fdcfb8a54696362e787dc2fb1bfbbce8de06958d0b156a94934a970220109c01311aa4108f69bc427c9fc708e9ac1d6fdff88e5d4dd43cbd4f5d6869df0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a963156ba0000040300463044022002ea938a04eb4e7c4221a77ebf677d7b59196435de2b552c10f46e9db6642f640220229f7df8df08792e5f2167e9a22ddf60dd2622768861737e580b0d5f734cf8b00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016a9631553b000004030047304502202c42d50b24d3ab0a10902caf4822beb88dcf1550260fb8cf8e56b0ff67b7adb5022100b2a41c0ddf022e92bd9ebc4011be10a7cc6d0d0ccbe6a29a5d994d279ad46c4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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