dyfee.uc3m.es

- Universidad Carlos III de Madrid -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 06:89:3b:d3:7b:8d:bd:4b:e4:91:53:b4:31:b8:9c:53 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universidad Carlos III de Madrid

Organization: Universidad Carlos III de Madrid
State / Province: Comunidad de Madrid
Locality: Leganés
Country: ES

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 06:89:3b:d3:7b:8d:bd:4b:e4:91:53:b4:31:b8:9c:53
Serial Number (int): 8687926061875681256693976887992032339
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ed:fe:08:0a:0c:28:6e:c3:43:8e:72:14:a7:e2:f5:f1:ff:0c:dc:fa
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 03:0f:86:63:7c:b4:82:84:5a:e8:85:2b:2e:b2:c8:a6:1e:ae:1f:80
Fingerprint (sha256): 0a:72:68:01:c5:8c:a3:5e:9d:60:97:61:8e:38:fd:be:98:cc:68:41:73:e6:33:23:bb:ba:5a:15:e2:e7:25:87

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate dyfee.uc3m.es

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dyfee.uc3m.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dyfee.uc3m.es
www.dyfee.uc3m.es

Other certificates including the domain name uc3m.es

(limited to 100 certificates)
codeboard.gast.it.uc3m.es
gauss.uc3m.es
vivo-clon.uc3m.es
residencias.fund.uc3m.es
aulaglobal.uc3m.es
ac2.arcos.inf.uc3m.es
correo.lab.inf.uc3m.es.uc3m.es
aulavirtual.uc3m.es
vciberlab2.lab.it.uc3m.es
marcajes.aig.uc3m.es
redes.uc3m.es
zabbix.uc3m.es
uxxip.uc3m.es
gitlab.it.uc3m.es
www.uc3m.es
asrob.uc3m.es
oslo.aig.uc3m.es
nuberu.uc3m.es
expeleganes.uc3m.es
lightningguide.net
becasalumni.fund.uc3m.es
test.colegiosmayores.fund.uc3m.es
delegacion.uc3m.es
grey.busha.co
nuberu.uc3m.es
labarciot.lab.it.uc3m.es
netcom.it.uc3m.es
nuberu.uc3m.es
contrabajo.it.uc3m.es
sede.uc3m.es
aplicaciones.uc3m.es
arcamm.uc3m.es
u21.uc3m.es
media.uc3m.es
spoc.uc3m.es
voremetur.uc3m.es
rm.uc3m.es
listserv.uc3m.es
salasbib.uc3m.es
cubo.uc3m.es
arcamm.uc3m.es
sede.uc3m.es
testaplicaciones.uc3m.es
aulavirtual.uc3m.es
listserv.uc3m.es
gescm.fund.uc3m.es
titan.softlab.uc3m.es
web.softlab.uc3m.es
blog.swa.sel.inf.uc3m.es
s3newscoop.uc3m.es
dyfee.uc3m.es
plato.it.uc3m.es
gp.uc3m.es
congrega.fund.uc3m.es
aulaglobal.uc3m.es
app.my-guitar-tabs.com
cas-media.uc3m.es
podcast.uc3m.es
sparrow.arcos.inf.uc3m.es
flautin.it.uc3m.es
janacek.uc3m.es
ametrics.it.uc3m.es
luciernaga.it.uc3m.es
mailserver.fund.uc3m.es
tamtam.it.uc3m.es
aulavirtual.uc3m.es
sigma-test.uc3m.es
strauss.uc3m.es
nfsen.uc3m.es
sdi.uc3m.es
trompa.it.uc3m.es
uxxi.uc3m.es
repositorio.lab.inf.uc3m.es.uc3m.es
www.uc3m.es
mediasite.uc3m.es
sede.uc3m.es
correong.uc3m.es
5gtours.netcom.it.uc3m.es
mastersonlineempresa.uc3m.es
seldata.sel.inf.uc3m.es
strauss.uc3m.es
zabix.uc3m.es
graficadb.uc3m.es
berlioz.uc3m.es
*.dei.inf.uc3m.es
blog.swa.sel.inf.uc3m.es
cursosoye.fund.uc3m.es
contrabajo.it.uc3m.es
auth-test.uc3m.es
alumnos.uc3m.es
asrob.uc3m.es
mid.uc3m.es
ocs.uc3m.es
venus.softlab.uc3m.es
oslo.aig.uc3m.es
predls.uc3m.es
asrob.uc3m.es
xwodan.uc3m.es
pa5220g.uc3m.es
mediasite.uc3m.es

Certificate

The complete raw certificate details for dyfee.uc3m.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIQBok703uNvUvkkVO0MbicUzANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xOTA5MjcwMDAwMDBaFw0yMTEyMzAwMDAwMDBaMIGBMQswCQYDVQQG
EwJFUzEcMBoGA1UECBMTQ29tdW5pZGFkIGRlIE1hZHJpZDERMA8GA1UEBwwITGVn
YW7DqXMxKTAnBgNVBAoTIFVuaXZlcnNpZGFkIENhcmxvcyBJSUkgZGUgTWFkcmlk
MRYwFAYDVQQDEw1keWZlZS51YzNtLmVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtAwvXJfIwG06gK4ZdoGF8JB6mS1+2ikvgIfM4auD2hHR4RsLcaxN
R7SOYt6OBReOxtJJMyQBJJrKPmBlQCism2sMWVm8VkFCRLaeSK/K5v1WQ5BNixqr
7X0dyZhXUJApbErogT+RjCEk3L8M8cBqI+dnlUa31hOn5xX/873nnDwNq8jh7gZ6
GxEtlmXKVzdpfqvu0JE3m+MqvOoUNnTIPBRfgLmzNF0eKtiTEcQUtThcRgMvFrQ+
Z3Nu7T9IlN0PFC1qlOsUkp+9Mur2IwDXnIbNCDPIHF7dMTtaszP9Bc3Ap7U7Cwdv
GeUgLHYSqM6xjy8jq53WCstOsAfr5WncjQIDAQABo4IB7jCCAeowHwYDVR0jBBgw
FoAUZ/2IIBQnmMcJ0iUZu+lREWN1UGIwHQYDVR0OBBYEFO3+CAoMKG7DQ45yFKfi
9fH/DNz6MCsGA1UdEQQkMCKCDWR5ZmVlLnVjM20uZXOCEXd3dy5keWZlZS51YzNt
LmVzMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RF
UkVOQVNTTENBMy5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9U
RVJFTkFTU0xDQTMuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB
BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG4G
CCsGAQUFBwEBBGIwYDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu
Y29tMDgGCCsGAQUFBzAChixodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVS
RU5BU1NMQ0EzLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQAPJK+vrpTn80NAf+XY4el0k8hrgnyxr62hEk8D
HUzgFhHm4r6WIUzraG61e9AcElyRMv6nwLufH84Pz0Tz+EbCcrpFp/1reGvd45mK
+adDTvAZyUCwZjKXlmTf9nU90c8V8ymfiB2mBffjuxLeVDV6KBg/gwdQ2pFiFYYF
OTSss8Fmq8wKPi8xvbM47u811Raabhb5SqUX5BmNVtCF/6/bBIWMfKoaqyfPe5+v
E8xJdJnPQh6SSYEi0O4uzI66jsKkBQYlEbH53LiFQtzSbaevuMAcQtFl18Jydbvy
XgIVQFo/RVJuw4Efcf7qp9ZBgRiTOQyouHiyhKcJB+FDMUqV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAwvXJfIwG06gK4ZdoGF
8JB6mS1+2ikvgIfM4auD2hHR4RsLcaxNR7SOYt6OBReOxtJJMyQBJJrKPmBlQCis
m2sMWVm8VkFCRLaeSK/K5v1WQ5BNixqr7X0dyZhXUJApbErogT+RjCEk3L8M8cBq
I+dnlUa31hOn5xX/873nnDwNq8jh7gZ6GxEtlmXKVzdpfqvu0JE3m+MqvOoUNnTI
PBRfgLmzNF0eKtiTEcQUtThcRgMvFrQ+Z3Nu7T9IlN0PFC1qlOsUkp+9Mur2IwDX
nIbNCDPIHF7dMTtaszP9Bc3Ap7U7CwdvGeUgLHYSqM6xjy8jq53WCstOsAfr5Wnc
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8687926061875681256693976887992032339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-30 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comunidad de Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leganés'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universidad Carlos III de Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dyfee.uc3m.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22728903544593269773325493903436909623963810903604852704075089209819187024205533659289472610588219727839068146099236181570255945957579138497410072477616937795382178816419328465461602837023668875100797645313408012663175978118979726282144341399438194455471781546548773451847102558357802252106806988974830376735339911791527944164269879827757540889342673111383585689986130775001156756198537208672782370197698815478226822966263090104913005916977869250542904597687293762780596452942647120752724108803684150635628780596196106776572523360360350741335684105692363670243117606041131601699560400723540294798667551698615620197517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edfe080a0c286ec3438e7214a7e2f5f1ff0cdcfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyfee.uc3m.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyfee.uc3m.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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