pilote.univ-grenoble-alpes.fr

- Université Grenoble Alpes -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0a:bf:e5:e9:12:9b:56:1f:44:d8:b3:19:16:b9:dd:91 was issued on by TERENA.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Grenoble Alpes

Organization: Université Grenoble Alpes
Organization unit: DAPI
Locality: Saint-Martin D'Hères
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:bf:e5:e9:12:9b:56:1f:44:d8:b3:19:16:b9:dd:91
Serial Number (int): 14288671795548933241357122361464839569
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:bd:47:d2:a2:64:d1:64:c3:42:80:98:e7:f7:ea:ae:36:11:d8:84
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 3f:a1:f7:df:b9:b9:e8:6e:77:76:6c:57:77:87:f9:f8:47:fe:94:3d
Fingerprint (sha256): 08:ae:64:e2:33:5f:eb:9b:82:9e:b7:58:e0:07:d3:ad:61:1a:3f:5e:f2:75:03:bf:e9:90:b8:69:52:de:6d:1b

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate pilote.univ-grenoble-alpes.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pilote.univ-grenoble-alpes.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pilote.univ-grenoble-alpes.fr
pilote.u-ga.fr
videos.univ-grenoble-alpes.fr

Other certificates including the domain name univ-grenoble-alpes.fr

(limited to 100 certificates)
chamilo.iut2.univ-grenoble-alpes.fr
shib3v3.univ-grenoble-alpes.fr
iut1-srv-web18.univ-grenoble-alpes.fr
enquetes.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
copass.grenet.fr
miage-grenoble.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
gin5-serv.univ-grenoble-alpes.fr
fuga-media-stock.univ-grenoble-alpes.fr
www-fourier.univ-grenoble-alpes.fr
partage-lsi.univ-grenoble-alpes.fr
persyval-lab.univ-grenoble-alpes.fr
sk-cic-it.imag.fr
gricad-registry-test.univ-grenoble-alpes.fr
copass.grenet.fr
ifmail.univ-grenoble-alpes.fr
apple-uga.u-ga.fr
pilote.univ-grenoble-alpes.fr
gricad.univ-grenoble-alpes.fr
ist-web3.ujf-grenoble.fr
ufrim2ag.ujf-grenoble.fr
gin-serv.univ-grenoble-alpes.fr
lig-expire-web.imag.fr
echamilo.grenet.fr
datageosciences.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
fabmstic.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
self6.univ-grenoble-alpes.fr
ulea-wiki.univ-grenoble-alpes.fr
ifmission.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
sante-lsurvey.univ-grenoble-alpes.fr
iut1-culture-etudiant.univ-grenoble-alpes.fr
wcp.univ-grenoble-alpes.fr
self7.univ-grenoble-alpes.fr
if-forge.ujf-grenoble.fr
self.univ-grenoble-alpes.fr
resa-ictiss.imag.fr
vpn2-int.iut2.univ-grenoble-alpes.fr
iut1-mmi-moodle.univ-grenoble-alpes.fr
copass.grenet.fr
gricad-doc.univ-grenoble-alpes.fr
chamilo-uga-vs.grenet.fr
copass-client.grenet.fr
projects-call.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
ifmission.univ-grenoble-alpes.fr
ldap.iut2.upmf-grenoble.fr
*.gricad-pages.univ-grenoble-alpes.fr
portail.univ-grenoble-alpes.fr
www-liphy.ujf-grenoble.fr
self5.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
www-fourier.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
ist-geodyn.univ-grenoble-alpes.fr
im2ag-sgce.e.univ-grenoble-alpes.fr
ametys-uga.grenet.fr
shibboleth.univ-grenoble-alpes.fr
intranet-timc.imag.fr
cloud.univ-grenoble-alpes.fr
arpont.imag.fr
observatoire.univ-grenoble-alpes.fr
*.gricad-gitlab.univ-grenoble-alpes.fr
sum-graf.univ-grenoble-alpes.fr
iut1-srv-web14.univ-grenoble-alpes.fr
fourier.univ-grenoble-alpes.fr
lig-wwwphp.imag.fr
dev-1.u-ga.fr
ifforge.univ-grenoble-alpes.fr
auth.univ-grenoble-alpes.fr
ist-sismalp.osug.fr
*.comar-project.univ-grenoble-alpes.fr
eformation.univ-grenoble-alpes.fr
ljk.univ-grenoble-alpes.fr
im2ag-wiki.univ-grenoble-alpes.fr
help.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
veri-web-projects.univ-grenoble-alpes.fr
visio-preprod.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
www-info.iut2.upmf-grenoble.fr
www-fourier.ujf-grenoble.fr
iut1-srv-web19.univ-grenoble-alpes.fr
gin11-web.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cloud-test.univ-grenoble-alpes.fr
hal.univ-grenoble-alpes.fr
gricad-wiki.univ-grenoble-alpes.fr
chamilo-iut2-vs.grenet.fr
enquetes.univ-grenoble-alpes.fr
superdoc.iut2.univ-grenoble-alpes.fr

Certificate

The complete raw certificate details for pilote.univ-grenoble-alpes.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1H2tmbGHBSpc7cafxf2
WqrHqd9UzAvqV/L7gu3xOjOkguRLKL3kuq/cCYmdRJS8ALHtMHDYLCgG8RmmTkyn
/sE5ekTT0cIqGqENsObEMsd9oyMr8SEARCFAwvQb/+zoxDVTDjY9ydhqHPG4sJqH
hwLPGoWPUP3vrHRHkZUv0AgGl20eGA/MxSAey49IOyw0+aTamzx+YtZy7kzRrNet
XplX4KbeH0S4Pc37PIC9QzinEHyeFA9blYNhtHpe1ISLgz5JLpn8fdtA9ImIGh5v
S7F4VLZHz09cL6JFfcsVffLwPr2TjnEn3UGoCz92sSsfRcXAHdpWy5AOdv7xZsc4
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14288671795548933241357122361464839569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint-Martin D'Hères'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Grenoble Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DAPI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pilote.univ-grenoble-alpes.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22637074406006864713271038523996530548543285710253919637215150687845105110673030693953201801322296100311959254591979617115062194980977301808401172585524437347061635671558977181701900019229571771660785972121093504327308230305922709937746273779553517753949138802592086110158325619871441047720690983669211314600485455895945810968964520699181687188030559315258993511968367323076065156899957712429962882815332068269411389153192729893928193822655527832058631180564019858033247889430287558401428622209799535999935249191763004536403584100715760601922044105949301415411680706248055047518369117256490320831277755915070041700577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93bd47d2a264d164c3428098e7f7eaae3611d884
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilote.univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilote.u-ga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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