leidenarthistoryblog.nl
- Leiden University -
Issued by TERENA SSL CA 3
About this certificate
This digital certificate with serial number 0b:b8:c5:7c:f8:86:41:92:fd:7a:ba:3c:3d:76:a4:35 was issued on by TERENA.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Leiden University
Organization:
Leiden University
Locality:
Leiden
Country: NL
Country: NL
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:b8:c5:7c:f8:86:41:92:fd:7a:ba:3c:3d:76:a4:35Serial Number (int): 15580896111503142194275942843949687861
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ca:96:7a:b6:c7:ba:d2:93:0f:cc:82:ca:46:ee:dd:c9:25:5b:71:8e
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62
Fingerprint (sha1): 9e:1e:8c:06:5e:7c:fe:9f:fd:40:af:0e:d6:fa:65:bc:38:16:50:6f
Fingerprint (sha256): 08:27:96:50:57:2b:95:05:de:66:51:4b:1b:8c:03:3d:5f:9c:f5:24:fd:76:67:c7:e4:0d:18:30:10:bf:0d:d0
Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl
Check the revocation status for certificate leidenarthistoryblog.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for leidenarthistoryblog.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
leidenarthistoryblog.nl
p-issc-006516.infra.leidenuniv.nl
p-issc-006516.infra.leidenuniv.nl
Other certificates including the domain name leidenarthistoryblog.nl
(limited to 100 certificates)
Certificate
The complete raw certificate details for leidenarthistoryblog.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIQC7jFfPiGQZL9ero8PXakNTANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0xOTA2MjUwMDAwMDBaFw0yMTA2MjkxMjAwMDBaMFwxCzAJBgNVBAYT Ak5MMQ8wDQYDVQQHEwZMZWlkZW4xGjAYBgNVBAoTEUxlaWRlbiBVbml2ZXJzaXR5 MSAwHgYDVQQDExdsZWlkZW5hcnRoaXN0b3J5YmxvZy5ubDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBANoe90hVN8H9I66S+9UiPF1j6Bwd2wpG1shd8MZz w4YD4Wi9vx5eeTCE4DQJ3aG+OjHbwlhuCm4g4TCUyaJ0iolESZu72FPuOz5LLuRu aDJ4hz67WH7iAc/PNjQQHPRNy9QLZ5EGdtiGzQ3PbQUNX14LSJXh56J8pnBEaxaX UlkwdRj1kN0Ey3BCi1gg9wcJ1Apd18rqjPUqZwLq/hG7svlsi1mKQfj2NURgNWUe BT9uYsZ7f0mlIZlgRntM84+EJLa9uaZrgAW5P6XzdleyvZIRfN0aBJguJSh5tyUo 8iiOSNj3MaoRbtiZ6U5gKOcJLeY7rL9Fzb9tQzVEqfcbl2GxR2v+/igDwWoRqaL9 o65Na1ZzFGK9/Sbuec68FwFzgkLUrN2vQMmEJnG/R3Q5aW+bXmzojA32TZL5u1x6 8TOKtNDCeRBymSC7NXojfgb7+fLEK8qMmFsnp52ScNf2d7DXzbH/H4OQyGwiuQKS 4GgACbpeQPakbdvpcYK3zQ4lmEKJ2QEtJtl078hOOAjDPS7Q7nTjYHL8Vxps/BW3 3t4D+ZdMMUP6cDo4TrlywU7vorsSOYW4IkBrIoO8tr6u1IjpVT6E45krkARAc4/q B0pibqo8DxHoDFb+BpUdeXRH/f1msFQcr+FmTIsD15rTC+3CMoD4xc5qxWvsq/W2 U2QJAgMBAAGjggIIMIICBDAfBgNVHSMEGDAWgBRn/YggFCeYxwnSJRm76VERY3VQ YjAdBgNVHQ4EFgQUypZ6tse60pMPzILKRu7dySVbcY4wRQYDVR0RBD4wPIIXbGVp ZGVuYXJ0aGlzdG9yeWJsb2cubmyCIXAtaXNzYy0wMDY1MTYuaW5mcmEubGVpZGVu dW5pdi5ubDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv bS9URVJFTkFTU0xDQTMuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5j b20vVEVSRU5BU1NMQ0EzLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgG CCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEC AjBuBggrBgEFBQcBAQRiMGAwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj ZXJ0LmNvbTA4BggrBgEFBQcwAoYsaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t L1RFUkVOQVNTTENBMy5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4PEmuS5MWtrwNYkjKfxi9cgSnjtsoVP OMwVpAY+c8oGj1aAv17wxm5Vky4NyBUxso15c2aQERm7m0wKAsbumhCIv0p1aAR7 PICoVc0oAK2hfaj8IkkilhoWmdMd6mjjlycy8Q0XhYe6GxL6FNcwIs5UQHwqd9IK DuZDy8B3n5cd+3/DZhCAaoHZxZ3jpYUx8o5i5wZLmDgEBrsajDkk60F4Gc5oAkNb BLajDWYaluSxJZguEAJKVkNXfJv/isl8GqfwG9EpsRWsZqSrrpQqkoxP8yPiAU2d s/0rSYD4aVlJocZ042P9xGNri9h3+Zncvp7xRakxqgEV/OV0Zm0XMA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2h73SFU3wf0jrpL71SI8 XWPoHB3bCkbWyF3wxnPDhgPhaL2/Hl55MITgNAndob46MdvCWG4KbiDhMJTJonSK iURJm7vYU+47Pksu5G5oMniHPrtYfuIBz882NBAc9E3L1AtnkQZ22IbNDc9tBQ1f XgtIleHnonymcERrFpdSWTB1GPWQ3QTLcEKLWCD3BwnUCl3XyuqM9SpnAur+Ebuy +WyLWYpB+PY1RGA1ZR4FP25ixnt/SaUhmWBGe0zzj4Qktr25pmuABbk/pfN2V7K9 khF83RoEmC4lKHm3JSjyKI5I2PcxqhFu2JnpTmAo5wkt5jusv0XNv21DNUSp9xuX YbFHa/7+KAPBahGpov2jrk1rVnMUYr39Ju55zrwXAXOCQtSs3a9AyYQmcb9HdDlp b5tebOiMDfZNkvm7XHrxM4q00MJ5EHKZILs1eiN+Bvv58sQryoyYWyennZJw1/Z3 sNfNsf8fg5DIbCK5ApLgaAAJul5A9qRt2+lxgrfNDiWYQonZAS0m2XTvyE44CMM9 LtDudONgcvxXGmz8Fbfe3gP5l0wxQ/pwOjhOuXLBTu+iuxI5hbgiQGsig7y2vq7U iOlVPoTjmSuQBEBzj+oHSmJuqjwPEegMVv4GlR15dEf9/WawVByv4WZMiwPXmtML 7cIygPjFzmrFa+yr9bZTZAkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15580896111503142194275942843949687861 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-29 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leidenarthistoryblog.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889855883562273400172272314393970499231556978459411612130029718600099437977923691637218811394557577768839274641945509307541336272175006654707077680155356805981940911714446940407889075589213342330456872646203995129839065234637318745576109218117577696003065003806253352481484107975742827883861089869868582252368873512109040337010235171982109582574685324946597531184316609564850940621158360900460425804063620587834253700046649635603475568940987682376007806277379594071357092682820108219925643505614339192648240896553298798447201754803445020462005698901747647484968074837921549850457771301337206962486365454355440550275524792101691417256445451922516386256521432861593790451424647556350669109209703975738843235629623338381689616550789874444800799128082483601379718866049601127755192541436392137275192747691053109809859860283946410347112665739255284096158692064660725435921980591312534427919385948048581920281102092177597480953395624646400278772622851714351123477932768347591635033417406549337615141585923606844394178138729933147430052149823272938454297507026146251386269210151321871176671417215246966537820263770079095828824143151045571370110072825921901993495778280142255571678227105429487775341929429031969755500826734061526997957567497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ca967ab6c7bad2930fcc82ca46eeddc9255b718e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leidenarthistoryblog.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-issc-006516.infra.leidenuniv.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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