hvacms-prd-www.lb.uva.nl

- Stichting Hogeschool Van Amsterdam -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 05:31:59:70:74:c0:c2:51:e6:12:8a:ed:a0:54:f9:f3 was issued on by TERENA.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Hogeschool Van Amsterdam

Organization: Stichting Hogeschool Van Amsterdam
Organization unit: ICT Services
Locality: Amsterdam
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 05:31:59:70:74:c0:c2:51:e6:12:8a:ed:a0:54:f9:f3
Serial Number (int): 6902376569135005061095020790589749747
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 24:e6:39:f7:ff:24:af:7e:f7:89:e5:49:d6:e9:87:65:e4:b0:77:5d
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): ee:c7:78:2c:5e:16:0f:17:46:e9:1a:d3:ee:86:1e:2c:c6:aa:56:57
Fingerprint (sha256): 08:fd:2e:dd:b9:b1:8f:7f:9c:69:ee:17:1b:e9:55:50:d7:2f:21:20:a5:ef:48:b0:7f:eb:81:d1:7e:0c:25:ae

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate hvacms-prd-www.lb.uva.nl

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hvacms-prd-www.lb.uva.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hvacms-prd-www.lb.uva.nl
hva.nl
www.hva.nl
static.hva.nl
idolaad.nl
www.idolaad.nl
ureka.eu
www.ureka.eu
ot-euromaster.eu
www.ot-euromaster.eu
idolaad.com
www.idolaad.com
amsterdamuas.com
www.amsterdamuas.com
international.hva.nl
www.international.hva.nl
www.juridisch.hva.nl
www.cms.hva.nl
english.cms.hva.nl
static.cms.hva.nl
m.cms.hva.nl
m-english.cms.hva.nl
ot-euromaster.nl
www.ot-euromaster.nl
orientatietraject.nl
www.orientatietraject.nl
taalenschakel.nl
www.taalenschakel.nl
www.amsib.com
www.amsib.eu
www.amsib.nl
www.amstelcampus.com
www.archiefschool.nl
www.ido-laad.com
www.ido-laad.nl
www.orientatiejaar.nl
www.studerenmeteenfunctiebeperking.nl
www.studiekeuzetraject.nl
www.studiekeuzetrajecten.nl
www.werkenbijdehva.nl
www.werkervaringtelt.nl
lerarenopleidingenamsterdam.nl
www.lerarenopleidingenamsterdam.nl
jong.hva.nl

Other certificates including the domain name uva.nl

(limited to 100 certificates)
elrond.ic.uva.nl
spin.spinnet.eu
parijs-deeltijd2016.humanities.uva.nl
sap-dev-rudx.ic.uva.nl
fullfabric.com
mobiusportal.uva.dev.icts.education
medewerker.uva.nl
schoolmuseum.uba.uva.nl
filmstudies.nl
amsterdam1544.humanities.uva.nl
www.fon.hum.uva.nl
studiegids.beheer.uva.nl
agile099.science.uva.nl
smdmmstreamprd.ic.uva.nl
idm-beheer.ic.uva.nl
academy.socsci.uva.nl
humanities.uva.nl
blendedlearning.socsci.uva.nl
sap-acc-ruax.ic.uva.nl
transparency.humanities.uva.nl
dutchcycling.socsci.uva.nl
educsys.uva.nl
slpl.science.uva.nl
ahmpostcolonialmemory.humanities.uva.nl
publichistory.humanities.uva.nl
zaken.test.uva.nl
roosterportal-tst.uva.nl
humanities.uva.nl
onderzoekmobw.socsci.uva.nl
cas-acc.ic.uva.nl
content-dev.sap.uva.nl
analytics.ic.uva.nl
agile042.science.uva.nl
smdmmstreamprd.ic.uva.nl
antondekom.humanities.uva.nl
digitaal.uba.uva.nl
mijn.usc.uva.nl
id-dev.ic.uva.nl
cas5-acc.lb.uva.nl
www.fnwi.uva.nl
nra-tst.sis.uva.nl
peoplexs.humanities.uva.nl
www.startmedewerker.uva.nl
docentenkamer.humanities.uva.nl
seop.illc.uva.nl
dom-prd1.ic.uva.nl
gbs-prd-kb2.gbs.uva.nl
antondekom.humanities.uva.nl
cleverdon.hum.uva.nl
acc.sis.uva.nl
feeding-the-city.create.humanities.uva.nl
learninglab.uva.nl
secure-apis.hva.nl
spin.spinnet.eu
webformulieren.uva.nl
smdmm3sb-prd.lb.uva.nl
corpnet.uva.nl
usc.uva.nl
readers.uva.nl
blackboard.uva.nl
gartnerportal.uva.prd.icts.education
agile117.science.uva.nl
paying-dev.uva.nl
agile152.science.uva.nl
www.gbs-prd-kb2.gbs.uva.nl
evasys.uva.nl
dpc.uba.uva.nl
100yearsofenglish.humanities.uva.nl
tlc.uva.nl
sils-fairspace.science.uva.nl
comtesttool.humanities.uva.nl
secure.uva.nl
smdmmstreamprd.ic.uva.nl
maven.ic.uva.nl
filmstudies.nl
cities.humanities.uva.nl
netbox.forux.nl
diensten.uba.uva.nl
agile235.science.uva.nl
axiom.humanities.uva.nl
studiegids.beheer.uva.nl
gitlab.ic.uva.nl
datanose.science.uva.nl
ldapad.uva.nl
educsys.uva.nl
vanmensending.humanities.uva.nl
agile123.science.uva.nl
appstore.uva.nl
reader.humanities.uva.nl
archives.uba.uva.nl
ex2016-prd-hva.lb.uva.nl
cf.humanities.uva.nl
cms-prd-www.lb.uva.nl
api.paying.uva.nl
*.proxy.uba.uva.nl
medina.ic.uva.nl
publicintervention.humanities.uva.nl
www.usc.uva.nl
parola.humanities.uva.nl
agile201.science.uva.nl

Certificate

The complete raw certificate details for hvacms-prd-www.lb.uva.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6902376569135005061095020790589749747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Hogeschool Van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hvacms-prd-www.lb.uva.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830974657806681119673980438772873907963482360928001370596395241439511844463633438927733636271458227319572475857522229508310324479743022260565553566313987859552552048931853222656567648734344538121245495421962123673876515602055623150003983090822493394236956749733027886525639237211975661391941001841824816304310654096868227589690570406261392312781053726847229830651572358561357696734259517572755183708575093524347434476619756164769458518164030866587407300067960421843455360575721237115649030730671295825948115971516470149704656480273307762303214587561476979425594224555149533977701253345128806834125342059563572097005383673757633842879479392518887375500453121316743921915635670419845579030002218738490395050212498768807031808042736671039410194156321787487621128370874063416061219961314057593626589719094893668733517068933320598503866451440718450669227132416379775612813885513084578062453155268384545692410730542872893457718747805396264950459779906777243990426049603378863093604681463689783405533810191355744206996053090589999263753920113378880062445321038591357094808390110445318849597166571839713265606168547690280125494042408052350250962026603416863792282358338378326940738858347240507854666739835038638724108186660197982350130985413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24e639f7ff24af7ef789e549d6e98765e4b0775d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (885 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacms-prd-www.lb.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolaad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idolaad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ureka.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ureka.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ot-euromaster.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ot-euromaster.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolaad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idolaad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsterdamuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsterdamuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.international.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juridisch.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-english.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ot-euromaster.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ot-euromaster.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orientatietraject.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orientatietraject.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taalenschakel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taalenschakel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsib.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsib.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amstelcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archiefschool.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ido-laad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ido-laad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orientatiejaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studerenmeteenfunctiebeperking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studiekeuzetraject.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studiekeuzetrajecten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werkenbijdehva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werkervaringtelt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerarenopleidingenamsterdam.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lerarenopleidingenamsterdam.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jong.hva.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0056ca8b55160ed572e5433e031bc7a4f2888980b15fffe579177a15033128224731809449b672da327db7892cc3fd5ba87c91b3bf81788a5f50125f013e5e7740c85ced03ff9766f41a72f41993cc7710a1d8027bb920b30c281e6c42e4fe056e8ba40395d087c9d3119c7ca54b78039bd32bfc7186a08a3eaa9658b969d908d9228597b70d9895b55dfa710068a514691b368480cedbf8207c22c85745be98d6345db025ea9ec50816350d292d9fa72a12675007198c93a07976cb44aa01e8dfd10e6b3705ee32f64466a29c6eb7bcadbeb35e487317368dd9caed3119edf70dd8fd662616be3446388df937df7e1df25eb04de8ff894d8898d7107149f268ec