*.acceptatie.hva.nl

- Stichting Hogeschool Van Amsterdam -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0a:e9:34:f1:39:7e:a4:44:07:da:10:4a:b9:c1:97:27 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Hogeschool Van Amsterdam

Organization: Stichting Hogeschool Van Amsterdam
Organization unit: ICT Services
State / Province: Noord Holland
Locality: Amsterdam
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:e9:34:f1:39:7e:a4:44:07:da:10:4a:b9:c1:97:27
Serial Number (int): 14503158922968075327188763992379201319
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:7f:d4:46:ba:e8:38:2e:00:42:c9:e7:5e:4a:9f:db:27:a5:6b:1d
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 37:93:c0:27:dc:48:f9:d0:f5:ee:de:83:f0:87:39:46:cf:5f:54:41
Fingerprint (sha256): 07:53:8c:8a:20:63:48:5b:0b:48:ad:c0:86:fe:92:dc:0b:6c:e0:5a:0f:9c:b5:13:9c:0a:aa:0c:fc:a2:f4:33

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.acceptatie.hva.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.acceptatie.hva.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acceptatie.hva.nl
acceptatie.hva.nl

Other certificates including the domain name hva.nl

(limited to 100 certificates)
*.medialab.hva.nl
edit-intra.dbsv.hva.nl
projectonline.dmci.hva.nl
acc-moodle.ict.hva.nl
mobiusportal.uva.dev.icts.education
acc-login.hva.nl
onderwijsconferentie.hva.nl
resultaten.hva.nl
rbs.iscb.hva.nl
fbe-magazines.hva.nl
mi.hva.nl
acc-mi.hva.nl
gitlab.techniek.hva.nl
campus.dmci.hva.nl
stage.centuri.hva.nl
incapsula.com
stagedbsv.hva.nl
teams-prd-sbc1.hva.nl
roosterportal.hva.nl
edulab.fbe.hva.nl
unixbeheer.forux.nl
incapsula.com
rooster.hva.nl
openid.hva.nl
hva.nl
secure-apis.hva.nl
moodle.cmd.hva.nl
asl.techniek.hva.nl
prdcltech0003.ict.hva.nl
intra.sem.hva.nl
webdav-intra.doo.hva.nl
databanken.bibliotheek.hva.nl
ontw-intra.mim.hva.nl
pure.hva.nl
gartnerportal.uva.prd.icts.education
roosterportal.hva.nl
legacy.hva.nl
declaraties.hva.nl
api.declaraties-acc.hva.nl
cl.acc.hvaweb.formist.nl
id.hva.prd.icts.education
apps.hva.nl
moodle-prd-fdmci.lb.hva.nl
edulab.fbe.hva.nl
incapsula.com
login.hva.nl
sis.hva.nl
incapsula.com
onderwijslab.techniek.hva.nl
*.acceptatie.hva.nl
prdcltech0004.ict.hva.nl
intra.alo.hva.nl
ex2016-prd-hva.lb.uva.nl
incapsula.com
edit-intra.iam.hva.nl
devarchief.roxen.hva.nl
incapsula.com
sis.hva.nl
acc-moodle.ict.hva.nl
hvacms-acc-redactie.lb.uva.nl
recovery.ict.hva.nl
rps.hva.nl
aanmelden.hva.nl
hvacms-prd-www.lb.uva.nl
campuscreators.nl
www.excellentieprogramma.hva.nl
gartnerportal3.uva.dev.icts.education
ac.hva.nl
hva.nl
gitlab.dmci.hva.nl
idm-acc-conhva1.acc-ad.hva.nl
login.hva.nl
sis.hva.nl
mapleta-oefen.hva.nl
curriculum.techniek.hva.nl
www.lustrum.hva.nl
wivlog.ict.hva.nl
incapsula.com
vpxldaps.ad.hva.nl
hvacms-prd-redactie.lb.uva.nl
sis.hva.nl
gitlab.techniek.hva.nl
incapsula.com
hvacms-prd-fe.lb.hva.nl
moodle-dev-fdmci.lb.hva.nl
edit-hva-instituten.hva.nl
salto-acc-hva1.ad.hva.nl
stage.centuri.hva.nl
bscw.hva.nl
discord.informatica.hva.nl
tijdreg.hva.nl
*.acc-blogs.dmci.hva.nl
beheervpn-prd.net.uha.nl
intra.si.hva.nl
lyndaportal.fdmci.hva.nl
dlwo.dmci.hva.nl
vpn.hva.nl
asl.techniek.hva.nl
api.payment-acc.ict.hva.nl
login.hva.nl

Certificate

The complete raw certificate details for *.acceptatie.hva.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIQCuk08Tl+pEQH2hBKucGXJzANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xNjAyMDgwMDAwMDBaFw0xOTAyMTIxMjAwMDBaMIGbMQswCQYDVQQG
EwJOTDEWMBQGA1UECBMNTm9vcmQgSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFt
MSswKQYDVQQKEyJTdGljaHRpbmcgSG9nZXNjaG9vbCBWYW4gQW1zdGVyZGFtMRUw
EwYDVQQLEwxJQ1QgU2VydmljZXMxHDAaBgNVBAMMEyouYWNjZXB0YXRpZS5odmEu
bmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgh9qZA5yvG/cLikr
YoiZE8W17bWTEO5phfxElx5Ta0o/xZaeTlG64cr6NqiG3LX+sAaT9P6pNZm2KOqK
dm431eqSkQCE+0DtcWG6JkyOjIVJ6fhBJGbe9PWyMuplk2eqWesi3kGi/BHSxibF
56JDW8HvCjYKVeEzm6kAuh+rxc9wduPRutuIMhxjmHTeEdjWhBNfvztuQrVvEnAm
t7IWILBY0NL/5q0GsL+IrByrZgY+o2n7joksIZzRGeR5IDjO6y1Hie1OByEucPDu
G68UopqbGQ7Y1v6xiVHHTBTldyeKGgnpoizczgi4cMBsO6XhVO8LY4iiEbRyEbN/
HfjzAgMBAAGjggHfMIIB2zAfBgNVHSMEGDAWgBRn/YggFCeYxwnSJRm76VERY3VQ
YjAdBgNVHQ4EFgQUtX/URrroOC4AQsnnXkqf2yelax0wMQYDVR0RBCowKIITKi5h
Y2NlcHRhdGllLmh2YS5ubIIRYWNjZXB0YXRpZS5odmEubmwwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+g
LaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNybDAv
oC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcmww
TAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwbgYIKwYBBQUHAQEEYjBgMCQG
CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOAYIKwYBBQUHMAKG
LGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3J0MAwG
A1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAEXiZ5qliXdF6PTMNQbNm1bz
/WzkyzniRMRbCbC0T1c+qLUdgfTIGkxrdGthlMYClLEw37lnZNz6w4+U6R8rU5oL
4MiiHwKlxdjUwvfzHUDPL8G87TIOSRL50TohYVSgG2TprIeccHRXPWZj0+nGlVKj
RfmSyJ0F++ceiHyWK6uVX3DRJc3I0lboSKzwqIkh1X21SGh8Bdd9Cx802J04CU8v
gG+EYR1Ir7vCXXUefkttJGtFjdlMmb3c89MX1W8am/WJNdmqYxiVqXXZp0LoKjlO
x8VAGRNeVE42wOsTOA4eRR/MgnSS8n/yr1F6ggnjy3rwLT2XLL075bVlVDDp9bQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIIfamQOcrxv3C4pK2KI
mRPFte21kxDuaYX8RJceU2tKP8WWnk5RuuHK+jaohty1/rAGk/T+qTWZtijqinZu
N9XqkpEAhPtA7XFhuiZMjoyFSen4QSRm3vT1sjLqZZNnqlnrIt5BovwR0sYmxeei
Q1vB7wo2ClXhM5upALofq8XPcHbj0brbiDIcY5h03hHY1oQTX787bkK1bxJwJrey
FiCwWNDS/+atBrC/iKwcq2YGPqNp+46JLCGc0RnkeSA4zustR4ntTgchLnDw7huv
FKKamxkO2Nb+sYlRx0wU5XcnihoJ6aIs3M4IuHDAbDul4VTvC2OIohG0chGzfx34
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14503158922968075327188763992379201319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Hogeschool Van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.acceptatie.hva.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24301920456803653566260108130872205394901607236790235762902818233553071539197982572380733772943732100319460098362716057357789773222925637549318420262371140606796156404132322938393742590785778050520382729204019729238036339222442261215041836864553856093312045203228129586328631632003308116429510475842063336204344165526869104626148972910652690943232368151397103647527115684932825878216109203032693586271368119621282060954737017751021511085923513270489400737139467318451076886095993667520421364470904965972290121602703057982945226839029644896376818693398302887077882638110492728489033025865136676994966323491279432710387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b57fd446bae8382e0042c9e75e4a9fdb27a56b1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acceptatie.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptatie.hva.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0045e2679aa5897745e8f4cc3506cd9b56f3fd6ce4cb39e244c45b09b0b44f573ea8b51d81f4c81a4c6b746b6194c60294b130dfb96764dcfac38f94e91f2b539a0be0c8a21f02a5c5d8d4c2f7f31d40cf2fc1bced320e4912f9d13a216154a01b64e9ac879c7074573d6663d3e9c69552a345f992c89d05fbe71e887c962bab955f70d125cdc8d256e848acf0a88921d57db548687c05d77d0b1f34d89d38094f2f806f84611d48afbbc25d751e7e4b6d246b458dd94c99bddcf3d317d56f1a9bf58935d9aa631895a975d9a742e82a394ec7c54019135e544e36c0eb13380e1e451fcc827492f27ff2af517a8209e3cb7af02d3d972cbd3be5b5655430e9f5b4