wencke4.housing.rug.nl

- Rijksuniversiteit Groningen -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 07:33:5f:98:0f:d3:9c:ab:9c:dc:02:b1:9a:bf:6d:a9 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksuniversiteit Groningen

Organization: Rijksuniversiteit Groningen
State / Province: Groningen
Locality: Groningen
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 07:33:5f:98:0f:d3:9c:ab:9c:dc:02:b1:9a:bf:6d:a9
Serial Number (int): 9571341986770834746377633124648447401
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 84:d8:54:d5:99:ec:c3:c8:fc:9f:76:97:22:eb:53:3c:b9:8d:6f:bf
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 0d:3a:53:22:3b:b6:81:2a:1c:63:c5:71:09:dc:4d:95:93:52:b8:0e
Fingerprint (sha256): 07:3d:37:52:48:96:c4:7e:87:bb:90:dc:9d:9b:98:47:ad:f7:fa:26:30:ff:fe:98:4e:b2:9c:2c:4d:56:4e:6b

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate wencke4.housing.rug.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wencke4.housing.rug.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wencke4.housing.rug.nl

Other certificates including the domain name rug.nl

(limited to 100 certificates)
webhost12.service.rug.nl
fssc.gai.rug.nl
ag.id.rug.nl
molgenis21.gcc.rug.nl
menu.ub.rug.nl
*.test.euclid.astro.rug.nl
sandbox-ssh.web.rug.nl
registry.webhosting.rug.nl
signon.rug.nl
molgenis104.gcc.rug.nl
rooster.rug.nl
fwn-biol-144-174.biol.rug.nl
topdesk.service.rug.nl
russischcentrum.ub.rug.nl
pan-209.nema.rug.nl
es-testdev01.ucms.rug.nl
dnpprepo.ub.rug.nl
test-sp.ucms.rug.nl
molgenis114.gcc.rug.nl
mijnrugpas.rug.nl
iwi232.iwinet.rug.nl
molgenis53.target.rug.nl
www.let.rug.nl
toptst01.serverspace.rug.nl
geo-test.rug.nl
cfs001.workspace.rug.nl
rabbitmq.web.rug.nl
molgenis14.target.rug.nl
monk.hpc.rug.nl
molgenis112.gcc.rug.nl
molgenis66.gcc.rug.nl
tst-idp.id.rug.nl
wordrobe.housing.rug.nl
new.tweets.dnpp.ub.rug.nl
gaiisap1.rcbiv.rug.nl
streaming13.serverspace.rug.nl
gaiisap1.rcbiv.rug.nl
doi.ub.rug.nl
molgenis113.gcc.rug.nl
webhost-ng.service.rug.nl
flexo.gcc.rug.nl
healthpsychology.cmb.med.rug.nl
apodat.iadb.nl
webhost3.service.rug.nl
survey.ai.rug.nl
acc-ugp.ub.rug.nl
examspace.vpn.rug.nl
molgenis109.gcc.rug.nl
meet.web.rug.nl
mypc1.service.rug.nl
molgenis70.gcc.rug.nl
share.ub.rug.nl
urd2.let.rug.nl
student.rug.nl
web2-prod.gai.rug.nl
profiling.hpc.rug.nl
mijnrugpas.rug.nl
orbishistorical.ub.rug.nl
rechtenscripties.eprints.rieven.ub.rug.nl
pmb.let.rug.nl
beaker.service.rug.nl
rng.gmw.rug.nl
trr-ev.id.rug.nl
xfactor.rug.nl
wencke4.housing.rug.nl
ads005.workspace.rug.nl
molgenis13.gcc.rug.nl
molgenis60.target.rug.nl
oasback.gai.rug.nl
libcal.rug.nl
molgenis01.gcc.rug.nl
acc-vvd.ub.rug.nl
pwstst.gai.rug.nl
horafinita.rug.nl
archresc2.service.rug.nl
cit-toasta1.serverspace.rug.nl
lb-ces-acc.ucms.rug.nl
pan.service.rug.nl
ocmp.phys.rug.nl
depa-images.ub.rug.nl
signal.web.rug.nl
chat.astro.rug.nl
rugpasfoto.webhosting.rug.nl
git.lwp.rug.nl
edusupport.rug.nl
gadgets.rug.nl
ocmp.phys.rug.nl
zabbix-cit.service.rug.nl
scoop-portal.data.rug.nl
test-pure-form.ub.rug.nl
bi.gai.rug.nl
molgenis97.gcc.rug.nl
molgenis04.target.rug.nl
mailserver.astro.rug.nl
poewaai.ub.rug.nl
personeel.ub.rug.nl
rl01.gai.rug.nl
dzn.eldoc.ub.rug.nl
support.horafinita.ub.rug.nl
urendeclaratie.gai.rug.nl

Certificate

The complete raw certificate details for wencke4.housing.rug.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw6PuLP2gI6oxNOgg14rZ
bhze183y7k43Novsf4UgeTS/6WE308Pk1KqIvrSo6xmeJqwMy7XyJ5SHKK6EfMGl
2xclXID1YXvZZnKhzKqHY7+yL35zp8te66KKisc5ULUd7+O47ddsanDT5Yy6myfO
oP8SWXsqGim8fZljA1phjbpeQU2/9eaRQU6OpHRHgi2rW07tBVI5f0SbG1u+H+uc
Pw6T25rbiHBGRgiuGdfr40R6eEbp/FrCq12RJ0Laq45jWYW6dv9jqBbIUO4gO8ef
F4f8REyDGVsNeUVytkVxQDRox+C4XukklzwQJTR1WKWhkFxgsdtpY0QVda5h2QT4
nixKtRvcvTa7sa7Ucxx9hw+VqkPaic/lZ8fLrLYIkJ0uxmAinhifKSqGEfgQhMZE
/vG3MggPzXpjcg21NulbpO3WGwSU3ASiVx8pt8o955h2TBZaUrm4/5aFdp/RBukk
tXBsk8FzKcCvcEcf2ht72jJIT3JFGTxkAmpa/kqkb5bkHw3XCTIuUjnjnfGIp4eh
C1yYUCNcIvQDIg9AXz6G3OgOllWoPBie6FCAyBb5A3tecDbZjpTXtGod36sScRRE
7GDfs8NZk7XuPMqB4yGxHuBH02pEOCyQ6sJsUCcTpY5muMzPb6sGwHLr20WOG+xH
mlb3kEbKdLpCr+a17f9C6dcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9571341986770834746377633124648447401
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksuniversiteit Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wencke4.housing.rug.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798143005677493724428583501265662184716409289073903958682105297393280212372108064750582206809138073545692332297288540910808774866276408418354805626615827275085534103186628457522587101774172972454659577696074082328872536077938910976500356466042259078042407959682267633019662484921892932583412891049692218559525819297538298222226147940125270618731081245946188061964381505106503337901992598734479605631644758060179149981209551281395359739047349371004911528475489341710091171430886410747985004538385813915034917764970395769886223843342908845542821118923156397537497377327656916098846962278101782377903806756034516829484155841972230708174430329112948478843263572650564330448984284945129266520361666254977668771868559166025218294236621247886417901595809839547282034026177868818115372697445137753268323840383258527695777211048008310103441068450862273618595989771460426642562948067420635036944161877875551304759580659912539810631306683977803534684038005758241464580103405248724351660822260265674583025616136436965218666443187894582390280194805236593589215664575410697202740559134182618388559397631132318518616911023866240942280708993646421613222315478112547711496818027401091429056431133453647383714372412567266717978838499750378566471313879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84d854d599ecc3c8fc9f769722eb533cb98d6fbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wencke4.housing.rug.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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