netacad.univ-reims.fr

- Université Reims Champagne-Ardenne -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 05:08:4e:ae:66:29:24:6f:55:62:1e:73:95:9b:78:6b was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Reims Champagne-Ardenne

Organization: Université Reims Champagne-Ardenne
Locality: REIMS
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 05:08:4e:ae:66:29:24:6f:55:62:1e:73:95:9b:78:6b
Serial Number (int): 6689274199059429317150974252083279979
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4b:66:7d:3a:40:6b:d3:7b:6c:b1:8f:75:c4:7f:e5:03:18:37:9e:34
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 45:b2:ca:97:e9:18:9f:4c:62:48:c7:18:8f:00:f8:4e:96:31:87:cf
Fingerprint (sha256): 09:b5:f4:2f:24:a4:2a:d4:a9:27:26:b1:20:e0:78:af:e0:f7:d2:04:1e:36:fc:89:11:c8:15:9e:27:14:77:5e

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate netacad.univ-reims.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netacad.univ-reims.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netacad.univ-reims.fr

Other certificates including the domain name univ-reims.fr

(limited to 100 certificates)
shib.univ-reims.fr
lamesvirtuelles.univ-reims.fr
logiciels.univ-reims.fr
visio-mra-expressway-e.univ-reims.fr
extractions.univ-reims.fr
omega.univ-reims.fr
visio-mra-expressway-e.univ-reims.fr
mint.univ-reims.fr
visio-expressway-e.univ-reims.fr
scolarite-iutrcc.univ-reims.fr
visio-expressway-c.univ-reims.fr
eboutique.univ-reims.fr
heberge.univ-reims.fr
inventaire.univ-reims.fr
romeogit.univ-reims.fr
wme1.univ-reims.fr
ccr-meso.univ-reims.fr
gestion-projet.univ-reims.fr
demat.univ-reims.fr
nas-histologie.univ-reims.fr
imaps.univ-reims.fr
netacad.univ-reims.fr
conges.univ-reims.fr
recrutement.univ-reims.fr
netacad.univ-reims.fr
agenda.univ-reims.fr
intranet.iut-troyes.univ-reims.fr
rvm.univ-reims.fr
toip-outils.univ-reims.fr
mobile-dev.univ-reims.fr
dokuwicri.univ-reims.fr
demat.univ-reims.fr
simseo.univ-reims.fr
esup-5.univ-reims.fr
idrac-ftp3.actif.univ-reims.fr
ebureau.univ-reims.fr
visio-expressway-e.univ-reims.fr
romeologin2.univ-reims.fr
micollab.univ-reims.fr
visio-cucm.univ-reims.fr
romeolab.univ-reims.fr
esup-2.univ-reims.fr
devapps.univ-reims.fr
julie.univ-reims.fr
imaps.univ-reims.fr
siham2-rp.univ-reims.fr
jeparticipe.univ-reims.fr
atm-gsma.univ-reims.fr
prime-cimc.interne.univ-reims.fr
visio-expressway-e.univ-reims.fr
icos.univ-reims.fr
hip.univ-reims.fr
vm-0999999999.univ-reims.fr
syslog.interne.univ-reims.fr
jeparticipe.univ-reims.fr
admin-vpn.interne.univ-reims.fr
eop.univ-reims.fr
caldav.univ-reims.fr
romeogit.univ-reims.fr
dataverse.univ-reims.fr
devapps.univ-reims.fr
apotest-fmw.univ-reims.fr
mx2.univ-reims.fr
impcpsv001.univ-reims.fr
www.univ-reims.fr
intranetv3.iut-troyes.univ-reims.fr
listes.univ-reims.fr
horoquartz.univ-reims.fr
romeo.univ-reims.fr
romeolab.univ-reims.fr
gestion-materiel.univ-reims.fr
simseo.univ-reims.fr
iut-info.univ-reims.fr
parapheur.univ-reims.fr
ssds-cloud.univ-reims.fr
vm-10.univ-reims.fr
eportfolio-test.univ-reims.fr
geranimaux.univ-reims.fr
webmail3.univ-reims.fr
crestic.univ-reims.fr
ccr.univ-reims.fr
syslog.interne.univ-reims.fr
frt.univ-reims.fr
mobile-dev.univ-reims.fr
actifbackup.univ-reims.fr
visio-outils.univ-reims.fr
visio-cucm-ms.univ-reims.fr
eboutique.univ-reims.fr
gsma-ausea.univ-reims.fr
romeolab.univ-reims.fr
parapheur.univ-reims.fr
secure-parapheur-test.univ-reims.fr
crdt.univ-reims.fr
visio-reservation.univ-reims.fr
frt.univ-reims.fr
pass.univ-reims.fr
rbu.univ-reims.fr
devapps.univ-reims.fr
rad2.univ-reims.fr
candidatures-mobilites.univ-reims.fr

Certificate

The complete raw certificate details for netacad.univ-reims.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHqzCCBpOgAwIBAgIQBQhOrmYpJG9VYh5zlZt4azANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xOTAxMTAwMDAwMDBaFw0yMTAxMTQxMjAwMDBaMGsxCzAJBgNVBAYT
AkZSMQ4wDAYDVQQHEwVSRUlNUzEsMCoGA1UECgwjVW5pdmVyc2l0w6kgUmVpbXMg
Q2hhbXBhZ25lLUFyZGVubmUxHjAcBgNVBAMTFW5ldGFjYWQudW5pdi1yZWltcy5m
cjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAM14kYcrB1BsF8RsWvyu
806S9iHPVZtMnGzG6bXhX4F8LwRwVV6zyxd9hyVB6jri2GacZZrnAgxX88pC2bjF
VWqL7n5jK6ZI8OapK7/fDD1thc+OXmz1Tny21GyibRaAVjPTw+N3PtAZ3WPokGVw
SOHtl0jgwG6tXekYjdzMFnxgkY52ZLKmGhNBYFzubbMiqpNvoz38Vq0k+avWNWud
xjwPfbzHLMST2Zex68bAtfo5kAx250dfcLCnmP0zaDeyq3GIbA7Xq5yBrBR18Ft7
iUKZFxbUIOfFxVTpNTXjJ3u90iTWHcoYIcqAjdbXTPra/+6WXPGDb5l+iHwkoa5B
aauVAtrn9nNbDwzVsv+xZHV1JIRkOiVJx7aStqxPTSuyT7sBc3hyNrkvWdPt0WfZ
vmTtOA4XBhtH0t1ob8j8JzQm/YHPpjKOT1yBATmYzfWlm4+U06R/svWe750iZFQ2
yN1r5FFjslSwWGGgI3q7enMLJV7MV37hvs5pVxS1zV3B2btuKbS/qUDud2JIYzxa
1GruH5JaHR2lMqAkrOCNF4Vi20LcnodpLSbYie10T40D72qjejtNuLvAGx9+7JrK
XBbH6A0HKSSjB7JeobNnsARpj3zn6OkuPejOySO7CWeEf9R0UHXuMfEjU4h5v6DF
UaZHLLPMmBh0o4ge9rYVtqvHAgMBAAGjggNQMIIDTDAfBgNVHSMEGDAWgBRn/Ygg
FCeYxwnSJRm76VERY3VQYjAdBgNVHQ4EFgQUS2Z9OkBr03tssY91xH/lAxg3njQw
IAYDVR0RBBkwF4IVbmV0YWNhZC51bml2LXJlaW1zLmZyMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2g
K4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcmwwL6At
oCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3JsMEwG
A1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG4GCCsGAQUFBwEBBGIwYDAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDgGCCsGAQUFBzAChixo
dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNydDAMBgNV
HRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgD2XJQv0XcwIhRU
GAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAWg3xgrdAAAEAwBHMEUCICY5lzxMFHFo
PdhFYx/5Q8V0wUxxpeX00KGAwXrZTPNmAiEAoBsov/ucHbj9BHXvk9kIOM8vGnjm
GDSJLCJWwce7ofUAdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAA
AWg3xgu4AAAEAwBHMEUCIQDSS6tTzKxAHGhymQeCbcLJkHboJ1sX4dFzJugbTZsP
KgIgYryK3Hy68+r7vuoYUKEjDvxhiyJks4e7hDzz/2rVwn4AdgBvU3asMfAxGdiZ
AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWg3xgw/AAAEAwBHMEUCIA1xFndrzL95
oPlV8Hu8QiyU17SZjYoG7sgxaz4S6zAsAiEAqDO+1pXGLRjx+vCa/uMjB3qk4t4J
IT59Cw8th7bbUD0wDQYJKoZIhvcNAQELBQADggEBAB6xF9dLdtY5WNxKkvMYNd6/
nxuz6Kmx3rbS7whRF9mJM/a7wqRjVGpSnTSlN/biLJ6dMRZvUNYl2QzQHpIwbGV+
aP0cPMx3jbbHUWMQgpcg7d0wJlsmRuFE4XBFLVUAbmOgIuex/m3QqN5LixqA9Klu
nRmAAZhIgz7MZVbHUgzlOwA7rAZvTYKWfUUwLTgH+JGU6fvs0k7+DFLpjg124ImT
8FDL7og5EpI3bt4sbZ8NOQNZPcSyJR4vBBtNG7um99ZAPLjZq+oAYplUXeG7BoP8
BTCVsgmadqLRvidj1/qPHjZwXldLCeUXxGS1/lRAtDAiVKabvptyEL3HZboNw4k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6689274199059429317150974252083279979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REIMS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Reims Champagne-Ardenne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netacad.univ-reims.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838248426281357318605178079885770036610640428667738006192264822966432278434823344556136486367684423990051483231102719634001447771036784145379920094231967404306868164725238320581108792764899181620999613387823158883187031244058198927882096216556886693069042603049796248573848583144660831963555261852158600539404964564927062317025916945072947864900659885138773867703766583213163276383244802576965075528505859411830884345664832002505508929795904237900988910017378684579795653545667751116680359341288224013171317341770911433896217457178658158048617709493418280843522508998878403602881217537447981971800027760073413471352776063378514233237659510716613049413572871323344490054574341019437310806053327361603357629104205440611031322844668073274036183344153268499191839666877366524239953742782540887324588116623933874064914217043424858643495255703083001238165665589990388363600668094055734155798870394320083674061678827199530692629450035152854086197872401702772093254394776849885804807313839566532793893785224562181203914614131078301917816307146583667728495998920741225999310195682402624193106542626160863282512929609859701955885236509844490982315838545708302165079464730172490009165477499494840327520636933740998732601486209392478311723477959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b667d3a406bd37b6cb18f75c47fe50318379e34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netacad.univ-reims.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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