bflux-stage-es-02.springernature.com
- Springer Nature B.V. -
Issued by TERENA SSL CA 3
About this certificate
This digital certificate with serial number 0d:f2:40:7b:93:01:11:d1:cf:2e:0d:d8:93:8a:1d:35 was issued on by TERENA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Springer Nature B.V.
Organization:
Springer Nature B.V.
Locality:
Dordrecht
Country: NL
Country: NL
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:f2:40:7b:93:01:11:d1:cf:2e:0d:d8:93:8a:1d:35Serial Number (int): 18537807649743547115360473484905553205
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6b:40:37:d9:c3:5e:11:d5:d9:be:a1:b4:8f:4e:93:3e:9f:0a:48:60
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62
Fingerprint (sha1): 05:36:08:af:32:4b:5a:8b:2a:a6:0b:cc:73:ae:1f:bc:c7:5a:64:eb
Fingerprint (sha256): 09:b4:d6:9e:57:b1:fd:da:e8:37:88:a0:58:f4:85:b1:24:e4:a3:8c:42:52:cb:be:a4:e9:d0:a8:b0:6d:55:c2
Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl
Check the revocation status for certificate bflux-stage-es-02.springernature.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bflux-stage-es-02.springernature.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bflux-stage-es-02.springernature.com
Other certificates including the domain name springernature.com
(limited to 100 certificates)
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
www.highq.com
auth.springernature.com
springer2.map.fastly.net
*.springernature.com
springer3.map.fastly.net
springer2.map.fastly.net
more-media.springernature.com
sn-prod-simac-alarm-01.springernature.com
support.khipu-networks.com
idtest.springernature.com
vanity4.jiveon.com
springer2.map.fastly.net
*.springer.com
authorservices.springernature.com
vpn-africa.springernature.com
adportal.springernature.com
sustainabilitycommunity.springernature.com
dns-vetting1i.map.fastly.net
uim.springernature.com
protocolsmethods.springernature.com
liferay-dev.springernature.com
scim-1password.springernature.com
uxresearch.springernature.com
vanity4.jiveon.com
bflux-stage-es-02.springernature.com
mee-uat.springernature.com
springer2.map.fastly.net
*.springernature.com
communities.springernature.com
shopify-qa.springernature.com
springer2.map.fastly.net
images.passendo.com
*.chef.tools.cm.springernature.com
springer2.map.fastly.net
dev.springernature.com
springer2.map.fastly.net
staging-scigraph.springernature.com
dns-vetting1i.map.fastly.net
vpn-aus.springernature.com
grandchallenges.springernature.com
springer2.map.fastly.net
vanity4.jiveon.com
vpn-gcp.springernature.com
authorservices.springernature.com
support.khipu-networks.com
support.springernature.com
secureimap.springernature.com
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
authorservices.springernature.com
vpn-ro.springernature.com
springer2.map.fastly.net
*.jiveon.com
staging.moody.springernature.com
authorservices.springernature.com
integration-sn-insights.springernature.com
images.passendo.com
springernature.com
www.highq.com
dns-vetting1i.map.fastly.net
dns-vetting1i.map.fastly.net
www.highq.com
vpn-ro.springernature.com
dns-vetting1i.map.fastly.net
trust.springernature.com
images.passendo.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
springer2.map.fastly.net
api.more-media.springernature.com
www.highq.com
securesmtp.springernature.com
nature-ww.springernature.com
*.springer.com
protocolsmethods.springernature.com
vpn.springernature.com
vpn.springernature.com
springer2.map.fastly.net
authorservices.springernature.com
springer2.map.fastly.net
images.passendo.com
*.springer.com
springer2.map.fastly.net
www.highq.com
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
hub.springernature.com
springer2.map.fastly.net
researchdata.springernature.com
dns-vetting1i.map.fastly.net
delivery.staging-cms.springernature.com
dev.springernature.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
springer2.map.fastly.net
springer2.map.fastly.net
www.highq.com
auth.springernature.com
springer2.map.fastly.net
*.springernature.com
springer3.map.fastly.net
springer2.map.fastly.net
more-media.springernature.com
sn-prod-simac-alarm-01.springernature.com
support.khipu-networks.com
idtest.springernature.com
vanity4.jiveon.com
springer2.map.fastly.net
*.springer.com
authorservices.springernature.com
vpn-africa.springernature.com
adportal.springernature.com
sustainabilitycommunity.springernature.com
dns-vetting1i.map.fastly.net
uim.springernature.com
protocolsmethods.springernature.com
liferay-dev.springernature.com
scim-1password.springernature.com
uxresearch.springernature.com
vanity4.jiveon.com
bflux-stage-es-02.springernature.com
mee-uat.springernature.com
springer2.map.fastly.net
*.springernature.com
communities.springernature.com
shopify-qa.springernature.com
springer2.map.fastly.net
images.passendo.com
*.chef.tools.cm.springernature.com
springer2.map.fastly.net
dev.springernature.com
springer2.map.fastly.net
staging-scigraph.springernature.com
dns-vetting1i.map.fastly.net
vpn-aus.springernature.com
grandchallenges.springernature.com
springer2.map.fastly.net
vanity4.jiveon.com
vpn-gcp.springernature.com
authorservices.springernature.com
support.khipu-networks.com
support.springernature.com
secureimap.springernature.com
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
authorservices.springernature.com
vpn-ro.springernature.com
springer2.map.fastly.net
*.jiveon.com
staging.moody.springernature.com
authorservices.springernature.com
integration-sn-insights.springernature.com
images.passendo.com
springernature.com
www.highq.com
dns-vetting1i.map.fastly.net
dns-vetting1i.map.fastly.net
www.highq.com
vpn-ro.springernature.com
dns-vetting1i.map.fastly.net
trust.springernature.com
images.passendo.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
springer2.map.fastly.net
api.more-media.springernature.com
www.highq.com
securesmtp.springernature.com
nature-ww.springernature.com
*.springer.com
protocolsmethods.springernature.com
vpn.springernature.com
vpn.springernature.com
springer2.map.fastly.net
authorservices.springernature.com
springer2.map.fastly.net
images.passendo.com
*.springer.com
springer2.map.fastly.net
www.highq.com
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
hub.springernature.com
springer2.map.fastly.net
researchdata.springernature.com
dns-vetting1i.map.fastly.net
delivery.staging-cms.springernature.com
dev.springernature.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
springer2.map.fastly.net
Certificate
The complete raw certificate details for bflux-stage-es-02.springernature.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIQDfJAe5MBEdHPLg3Yk4odNTANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0xOTEyMDkwMDAwMDBaFw0yMjAxMDUxMjAwMDBaMG8xCzAJBgNVBAYT Ak5MMRIwEAYDVQQHEwlEb3JkcmVjaHQxHTAbBgNVBAoTFFNwcmluZ2VyIE5hdHVy ZSBCLlYuMS0wKwYDVQQDEyRiZmx1eC1zdGFnZS1lcy0wMi5zcHJpbmdlcm5hdHVy ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQeAqKjAJXoFj SuiY50/bCCyfeyXepPBNVvTlnpaWePkY4T+PvhpLFdKu8jbW5mxR/Koe7Bon/DnW j3D8jrj2bG+l0u9cpBzvNDK4yebU+j4yexoXrI1/riMUPZe3kJqGMpARsamIFJ/b UORRpBCBqnBdp2u0SsOMYJbEtY33ETqTTBRuNAAJVbGEmgb08oqUrNUoUtD6aII8 sVBSxH6RjxpsiozN58gb6wZhm7iJh+KqKysdRZ/SBOwN7cdvJVodVhjEhn5LTdmp M2LnqcvE6nrgL1MnF4hSUJR6QTLMHJdIwoPjKKSM7IlcMECNzinj/RycI2SBEQAi ZCWyFPubAgMBAAGjggHyMIIB7jAfBgNVHSMEGDAWgBRn/YggFCeYxwnSJRm76VER Y3VQYjAdBgNVHQ4EFgQUa0A32cNeEdXZvqG0j06TPp8KSGAwLwYDVR0RBCgwJoIk YmZsdXgtc3RhZ2UtZXMtMDIuc3ByaW5nZXJuYXR1cmUuY29tMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAv oC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcmww L6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3Js MEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG4GCCsGAQUFBwEBBGIwYDAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDgGCCsGAQUFBzAC hixodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNydDAM BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQDDOCgAiN/euad3byOXamDLYfFBRAVKvO3AdO0f1+akQXficmP3LTlwNohB JtsjGs2FDtbDDmf2Yli7mBhZ731g3937jTY9ojOAFVAYexY4jzwHwtXj/8Xl9iLp K9fToslluK0tZG5zdjnYpV373LI4xZqkV0tlZFL+t+gdIvXbrNsj/MQZFbyYzi4C JCiWh72hIjL1xgn43LJjhMUN4K9bFpA9+dW+dbiX7Qhx9FI84COSMzE/YbJI0Nfu TQntRPzO4AHGXuCl/2GLxW5waQgWJV+cYqMT+tHycz0EjwXp8+U29kHP3OKFvhrx otGOVaELjeShKORPuePuKwCSSdXj -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkHgKiowCV6BY0romOdP 2wgsn3sl3qTwTVb05Z6Wlnj5GOE/j74aSxXSrvI21uZsUfyqHuwaJ/w51o9w/I64 9mxvpdLvXKQc7zQyuMnm1Po+MnsaF6yNf64jFD2Xt5CahjKQEbGpiBSf21DkUaQQ gapwXadrtErDjGCWxLWN9xE6k0wUbjQACVWxhJoG9PKKlKzVKFLQ+miCPLFQUsR+ kY8abIqMzefIG+sGYZu4iYfiqisrHUWf0gTsDe3HbyVaHVYYxIZ+S03ZqTNi56nL xOp64C9TJxeIUlCUekEyzByXSMKD4yikjOyJXDBAjc4p4/0cnCNkgREAImQlshT7 mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18537807649743547115360473484905553205 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dordrecht' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Springer Nature B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bflux-stage-es-02.springernature.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21997949554560252538877464375892728724343078609718247647055214200937858825185003444717653345934638893319355951747431252966079657546766225313788145269398160716614256420998609645942413383738987176867864018856926212738761895408120658242359894176480027811425392645404361615935430870450181704827197168497502533633989092078015628523406898020673946524501412259274752488163413424174911183062340752979322079592955212134473223252928170590876138602203279291605610544776058411389630265471022242258568965314647947778547412341386003148274405684197484387243466758998261338021009320396393573053756693978548965027119177665588757855131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6b4037d9c35e11d5d9bea1b48f4e933e9f0a4860 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bflux-stage-es-02.springernature.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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