netmon.ujf.cas.cz
- Ustav jaderne fyziky AV CR, v. v. i. -
Issued by TERENA SSL CA 3
About this certificate
This digital certificate with serial number 02:32:35:ae:6c:c0:a6:48:01:e2:2c:20:06:df:dc:8e was issued on by TERENA.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Ustav jaderne fyziky AV CR, v. v. i.
Organization:
Ustav jaderne fyziky AV CR, v. v. i.
Locality:
Husinec
Country: CZ
Country: CZ
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): 02:32:35:ae:6c:c0:a6:48:01:e2:2c:20:06:df:dc:8eSerial Number (int): 2919159621563124206970074764840787086
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 8c:3f:53:8b:ae:09:5f:18:ef:0f:29:84:9b:d5:d0:2a:79:42:49:4f
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62
Fingerprint (sha1): 26:1d:fa:62:31:8a:30:d1:b2:5f:37:4c:d4:97:f1:2a:a0:29:38:45
Fingerprint (sha256): 0a:73:dc:f1:b7:e1:cf:89:70:ae:9c:02:56:b2:6b:77:8f:8c:6f:43:07:dc:07:04:2e:73:76:b0:33:c5:9f:95
Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl
Check the revocation status for certificate netmon.ujf.cas.cz
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for netmon.ujf.cas.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
netmon.ujf.cas.cz
radius2.ujf.cas.cz
zabbix.ujf.cas.cz
samba.ujf.cas.cz
mail.ujf.cas.cz
radius2.ujf.cas.cz
zabbix.ujf.cas.cz
samba.ujf.cas.cz
mail.ujf.cas.cz
Other certificates including the domain name cas.cz
(limited to 100 certificates)
tbase.iic.cas.cz
www.astroplate.cz
sympa.utia.cas.cz
ecbd.img.cas.cz
www.iic.cas.cz
dev.herv.img.cas.cz
wtserv1.tok.ipp.cas.cz
breberka.site.cas.cz
avcr.cz
jiftach.cas.cz
radius1.iach.cas.cz
www.astroplate.cz
clb.ucl.cas.cz
matsrv.math.cas.cz
*.irsm.cas.cz
ds-uchp-backup.asuch.cas.cz
logbook.tok.ipp.cas.cz
allsky-bart.asu.cas.cz
*.lib.cas.cz
bibliografie.ujc.cas.cz
m3art.utia.cas.cz
filosofia.flu.cas.cz
arclib-test.lib.cas.cz
www.ibot.cas.cz
albina.uochb.cas.cz
reflexe.flu.cas.cz
fgusrvmail.fgu.cas.cz
fermium.iic.cas.cz
redmine.nh.cas.cz
rukovet.cms.flu.cas.cz
etno.eu.cas.cz
orbis.img.cas.cz
mail.flu.cas.cz
folia.paru.cas.cz
hroch486.icpf.cas.cz
sslvpn.cs.cas.cz
lhr.ueb.cas.cz
engmech.cz
projects.asu.cas.cz
www.udu.cas.cz
tok.ipp.cas.cz
durotest.img.cas.cz
web-lb04.img.cas.cz
ancientmedieval.flu.cas.cz
biblio.hiu.cas.cz
ds-uchp-an.asuch.cas.cz
aplab.ueb.cas.cz
madla.ujc.cas.cz
m3art.utia.cas.cz
www.uochb.cas.cz
sda.soc.cas.cz
idpmain.icpf.cas.cz
vosvrdaweb.utia.cas.cz
web-lb04.img.cas.cz
radius.slu.cas.cz
lexy.uochb.cas.cz
vocloud-dev.asu.cas.cz
pallas.ujc.cas.cz
login.lib.cas.cz
allsky-bart.asu.cas.cz
post2.ilaw.cas.cz
postak.ujc.cas.cz
fw1.ujf.cas.cz
vestlon.img.cas.cz
*.ezproxy.lib.cas.cz
archiv.soc.cas.cz
ca.icpf.cas.cz
kolbaba.utia.cas.cz
logbook.tok.ipp.cas.cz
wiki.eis.cas.cz
sumo.orient.cas.cz
fe.nh.cas.cz
ulozdata.ujc.cas.cz
vpnportal.img.cas.cz
avcr.cz
ftp5.cs.cas.cz
refugee.mua.cas.cz
ojs.irsm.cas.cz
academy2.cas.cz
ciel.biomed.cas.cz
www.math.cas.cz
chemspace.img.cas.cz
illias.icpf.cas.cz
martell.bc.cas.cz
application.math.cas.cz
ds-uchp-aero.asuch.cas.cz
alfresco1.eis.cas.cz
gemma.ujf.cas.cz
sova1.cs.cas.cz
users.canam.ujf.cas.cz
netmon.ujf.cas.cz
ironport.img.cas.cz
www4.ucl.cas.cz
fw.flu.cas.cz
d50.asu.cas.cz
filr.cs.cas.cz
*.libj.cas.cz
korpus.vokabular.ujc.cas.cz
mail.zamek-liblice.cz
kramerius.lib.cas.cz
www.astroplate.cz
sympa.utia.cas.cz
ecbd.img.cas.cz
www.iic.cas.cz
dev.herv.img.cas.cz
wtserv1.tok.ipp.cas.cz
breberka.site.cas.cz
avcr.cz
jiftach.cas.cz
radius1.iach.cas.cz
www.astroplate.cz
clb.ucl.cas.cz
matsrv.math.cas.cz
*.irsm.cas.cz
ds-uchp-backup.asuch.cas.cz
logbook.tok.ipp.cas.cz
allsky-bart.asu.cas.cz
*.lib.cas.cz
bibliografie.ujc.cas.cz
m3art.utia.cas.cz
filosofia.flu.cas.cz
arclib-test.lib.cas.cz
www.ibot.cas.cz
albina.uochb.cas.cz
reflexe.flu.cas.cz
fgusrvmail.fgu.cas.cz
fermium.iic.cas.cz
redmine.nh.cas.cz
rukovet.cms.flu.cas.cz
etno.eu.cas.cz
orbis.img.cas.cz
mail.flu.cas.cz
folia.paru.cas.cz
hroch486.icpf.cas.cz
sslvpn.cs.cas.cz
lhr.ueb.cas.cz
engmech.cz
projects.asu.cas.cz
www.udu.cas.cz
tok.ipp.cas.cz
durotest.img.cas.cz
web-lb04.img.cas.cz
ancientmedieval.flu.cas.cz
biblio.hiu.cas.cz
ds-uchp-an.asuch.cas.cz
aplab.ueb.cas.cz
madla.ujc.cas.cz
m3art.utia.cas.cz
www.uochb.cas.cz
sda.soc.cas.cz
idpmain.icpf.cas.cz
vosvrdaweb.utia.cas.cz
web-lb04.img.cas.cz
radius.slu.cas.cz
lexy.uochb.cas.cz
vocloud-dev.asu.cas.cz
pallas.ujc.cas.cz
login.lib.cas.cz
allsky-bart.asu.cas.cz
post2.ilaw.cas.cz
postak.ujc.cas.cz
fw1.ujf.cas.cz
vestlon.img.cas.cz
*.ezproxy.lib.cas.cz
archiv.soc.cas.cz
ca.icpf.cas.cz
kolbaba.utia.cas.cz
logbook.tok.ipp.cas.cz
wiki.eis.cas.cz
sumo.orient.cas.cz
fe.nh.cas.cz
ulozdata.ujc.cas.cz
vpnportal.img.cas.cz
avcr.cz
ftp5.cs.cas.cz
refugee.mua.cas.cz
ojs.irsm.cas.cz
academy2.cas.cz
ciel.biomed.cas.cz
www.math.cas.cz
chemspace.img.cas.cz
illias.icpf.cas.cz
martell.bc.cas.cz
application.math.cas.cz
ds-uchp-aero.asuch.cas.cz
alfresco1.eis.cas.cz
gemma.ujf.cas.cz
sova1.cs.cas.cz
users.canam.ujf.cas.cz
netmon.ujf.cas.cz
ironport.img.cas.cz
www4.ucl.cas.cz
fw.flu.cas.cz
d50.asu.cas.cz
filr.cs.cas.cz
*.libj.cas.cz
korpus.vokabular.ujc.cas.cz
mail.zamek-liblice.cz
kramerius.lib.cas.cz
Certificate
The complete raw certificate details for netmon.ujf.cas.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIQAjI1rmzApkgB4iwgBt/cjjANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0yMDAzMzEwMDAwMDBaFw0yMjA0MDUxMjAwMDBaMGoxCzAJBgNVBAYT AkNaMRAwDgYDVQQHEwdIdXNpbmVjMS0wKwYDVQQKEyRVc3RhdiBqYWRlcm5lIGZ5 emlreSBBViBDUiwgdi4gdi4gaS4xGjAYBgNVBAMTEW5ldG1vbi51amYuY2FzLmN6 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uKUpshJhvUbeNUWryrs dFuzvvYYIqN719RzeaamvuAzRikSrw0RtVP+RxSmIZU4dIwG+vy89QBIoDpn6oBl p6Mz8gDW3Se5RhxZco4IKFyHxnNXKctH3hRxnVWM6ns3bxFL3BdMF/uPC5Tn0+Hh FCMFqcYNo6CpTht5J31o9MHSCfACTRbOw/+i20AoW5aeneZITE3c4sCnrzBlfFJW uAZf6HHC58TGVZAUBQx4t7IwF+BBcSGo2/AacjU/Ud/iu3sZQX39M9xFUPwn5GqS 1hh/EDiYVz4rikxLUcr0Bx648WR1q4cNRte5uQp1y2N3R6GjLL0alryBTmtN28uo CwIDAQABo4ICKTCCAiUwHwYDVR0jBBgwFoAUZ/2IIBQnmMcJ0iUZu+lREWN1UGIw HQYDVR0OBBYEFIw/U4uuCV8Y7w8phJvV0Cp5QklPMGYGA1UdEQRfMF2CEW5ldG1v bi51amYuY2FzLmN6ghJyYWRpdXMyLnVqZi5jYXMuY3qCEXphYmJpeC51amYuY2Fz LmN6ghBzYW1iYS51amYuY2FzLmN6gg9tYWlsLnVqZi5jYXMuY3owDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBi MC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNy bDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5j cmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwbgYIKwYBBQUHAQEEYjBg MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOAYIKwYBBQUH MAKGLGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3J0 MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAJ6EAZKe/wP+hqM1t2IcO9QNNfnxikDAcLgrTwePqF424lLMFNN2DFkI xa6g1GXeD3DL9wBtJ6vKRWznL9zcIyYYlEkmmXIlAHTp+lRY2ClTE5nChu7ENfGS vj/FxKVLu0JVcifMjcO7AuXk2NM69xZaDxT+wP4pRNvSCQaBNTKxKshkaGVraUda TTtyAJe92oKm4tVzkrF61LQD5kgCDWF88rDNk3f6CKllP8jeGdL/71MnXficopI6 pW2OUy5H839Mqk2S95rdjlL/GaR9x1BmHCXinDgFp0+zrWFTSolBgAngyEqnW/C6 hEI+dXJ/4CvbyWcgZd6tmmUOv85lmBA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uKUpshJhvUbeNUWryrs dFuzvvYYIqN719RzeaamvuAzRikSrw0RtVP+RxSmIZU4dIwG+vy89QBIoDpn6oBl p6Mz8gDW3Se5RhxZco4IKFyHxnNXKctH3hRxnVWM6ns3bxFL3BdMF/uPC5Tn0+Hh FCMFqcYNo6CpTht5J31o9MHSCfACTRbOw/+i20AoW5aeneZITE3c4sCnrzBlfFJW uAZf6HHC58TGVZAUBQx4t7IwF+BBcSGo2/AacjU/Ud/iu3sZQX39M9xFUPwn5GqS 1hh/EDiYVz4rikxLUcr0Bx648WR1q4cNRte5uQp1y2N3R6GjLL0alryBTmtN28uo CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2919159621563124206970074764840787086 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Husinec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ustav jaderne fyziky AV CR, v. v. i.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netmon.ujf.cas.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27631681575201855723871918262637673037518496299873524056757270246921962111122279323916459270153500754692907386475790106275285499051577683339044355043972123019289795010022110538298997163526247234278707903424253582014707477768328370920568214942119554780458258372682085036470854320841390237644599833978047874375532025143522938019143842624107451018388335836757892308220424700602921495668703679226575249418176531515807988755199880352877448963246912898209572639282303227115017823928907001023643266764117880280028200905397365746147025008818423072326729582136187764359497762953434009581271825329707785536589900035023996430347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8c3f538bae095f18ef0f29849bd5d02a7942494f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netmon.ujf.cas.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radius2.ujf.cas.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zabbix.ujf.cas.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samba.ujf.cas.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ujf.cas.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009e8401929eff03fe86a335b7621c3bd40d35f9f18a40c070b82b4f078fa85e36e252cc14d3760c5908c5aea0d465de0f70cbf7006d27abca456ce72fdcdc2326189449269972250074e9fa5458d829531399c286eec435f192be3fc5c4a54bbb42557227cc8dc3bb02e5e4d8d33af7165a0f14fec0fe2944dbd20906813532b12ac86468656b69475a4d3b720097bdda82a6e2d57392b17ad4b403e648020d617cf2b0cd9377fa08a9653fc8de19d2ffef53275df89ca2923aa56d8e532e47f37f4caa4d92f79add8e52ff19a47dc750661c25e29c3805a74fb3ad61534a89418009e0c84aa75bf0ba84423e75727fe02bdbc9672065dead9a650ebfce659810