cisco-vpn.ifm.liu.se
- Linköpings universitet -
Issued by TERENA SSL CA 3
About this certificate
This digital certificate with serial number 0c:c6:cd:32:35:dd:ea:a1:f4:14:b6:34:d4:f7:d7:7e was issued on by TERENA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Linköpings universitet
Organization:
Linköpings universitet
Organization unit: IFM
Organization unit: IFM
Locality:
Linköping
Country: SE
Country: SE
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:c6:cd:32:35:dd:ea:a1:f4:14:b6:34:d4:f7:d7:7eSerial Number (int): 16982972599456746798885303697318336382
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 99:75:c7:64:73:d2:3f:62:cf:e2:cd:27:79:69:1d:34:63:77:49:c5
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62
Fingerprint (sha1): 6b:89:72:4b:4c:18:2e:1c:00:3f:0c:f1:66:02:3b:fb:86:ee:d9:ad
Fingerprint (sha256): 0b:05:28:b1:80:34:87:cf:a1:c3:84:17:c3:f0:10:23:b6:39:e0:c6:d0:db:10:9d:15:5d:db:9c:5f:17:d2:d5
Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl
Check the revocation status for certificate cisco-vpn.ifm.liu.se
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cisco-vpn.ifm.liu.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cisco-vpn.ifm.liu.se
Other certificates including the domain name liu.se
(limited to 100 certificates)
remindme.isv.liu.se
www.lysator.se
lyncowa1.ad.liu.se
nms.cyd.liu.se
exam.lisam.liu.se
medlem.stuff.liu.se
medlem.lintek.liu.se
myutn1.itn.liu.se
sharepoint.liu.se
bilda.liu.se
www.confero.ep.liu.se
calendar.isy.liu.se
foraldragruppen.it.liu.se
cadics.isy.liu.se
rdpklienter.edu.liu.se
hyperdoc.unit.liu.se
tp.on.liu.se
sleipner.isv.liu.se
snicdocs.nsc.liu.se
emma.ad.embassaden.liu.se
hr.liu.se
esg-dn1.nsc.liu.se
medlem.lintek.liu.se
www.nsc.liu.se
svn-und.ida.liu.se
milliways-2.lysator.liu.se
alumni.liu.se
search.liu.se
tal.test.it.liu.se
vpn.itn.liu.se
portal.ad.liu.se
it.liu.se
augmentedinformationspaces.itn.liu.se
remindme.isv.liu.se
graduateland.com
bolinc.nsc.liu.se
mirror.nsc.liu.se
dimma.it.liu.se
lisam.liu.se
sysadm.isy.liu.se
styrdokument.liu.se
account.liu.se
insidan.holgerspexet.se
nim.nsc.liu.se
mattemasken.test.it.liu.se
passwordstate.it.liu.se
medlem.stuff.liu.se
testbuss.test.it.liu.se
guide.bibl.liu.se
notificationhubproxy.test.it.liu.se
systemview.it.liu.se
httpkom.lysator.liu.se
tp.on.liu.se
medlem.stuff.liu.se
dashboard.test.it.liu.se
cms.ifm.liu.se
x-sys.itn.liu.se
journey.test.it.liu.se
c-zabbix2.itn.liu.se
medreg.lysator.liu.se
studentspex.se
atlas-cache03.bluegrass.nsc.liu.se
lisamadmin.app.test.cloud.it.liu.se
medlem.stuff.liu.se
vpn.it.liu.se
resebokning.liu.se
lists.ifm.liu.se
vastgota.nation.liu.se
ctrl-c.liu.se
search.liu.se
snicdocs.nsc.liu.se
sc2-dev-cm.test.ad.liu.se
remindme.isv.liu.se
teachings.app.test.cloud.it.liu.se
www.conference4.ep.liu.se
www.conference2.ep.liu.se
rag.lysator.liu.se
jamf1.test.ad.liu.se
pf-test.it.liu.se
racing.lysator.liu.se
nagios.ifm.liu.se
service.test.integration.it.liu.se
bokabil.it.liu.se
pulp2.it.liu.se
ysektionen.se
lkpws3.ad.liu.se
qv.it.liu.se
projects.itn.liu.se
valuationstudies.liu.se
gmproxy.test.it.liu.se
webmail.ifm.liu.se
datorhandbok.lysator.liu.se
talprod.it.liu.se
cisco-vpn.ifm.liu.se
www2.itn.liu.se
nikita.itn.liu.se
mail.liu.se
ctrl-c.liu.se
cms.ifm.liu.se
podd.itn.liu.se
www.lysator.se
lyncowa1.ad.liu.se
nms.cyd.liu.se
exam.lisam.liu.se
medlem.stuff.liu.se
medlem.lintek.liu.se
myutn1.itn.liu.se
sharepoint.liu.se
bilda.liu.se
www.confero.ep.liu.se
calendar.isy.liu.se
foraldragruppen.it.liu.se
cadics.isy.liu.se
rdpklienter.edu.liu.se
hyperdoc.unit.liu.se
tp.on.liu.se
sleipner.isv.liu.se
snicdocs.nsc.liu.se
emma.ad.embassaden.liu.se
hr.liu.se
esg-dn1.nsc.liu.se
medlem.lintek.liu.se
www.nsc.liu.se
svn-und.ida.liu.se
milliways-2.lysator.liu.se
alumni.liu.se
search.liu.se
tal.test.it.liu.se
vpn.itn.liu.se
portal.ad.liu.se
it.liu.se
augmentedinformationspaces.itn.liu.se
remindme.isv.liu.se
graduateland.com
bolinc.nsc.liu.se
mirror.nsc.liu.se
dimma.it.liu.se
lisam.liu.se
sysadm.isy.liu.se
styrdokument.liu.se
account.liu.se
insidan.holgerspexet.se
nim.nsc.liu.se
mattemasken.test.it.liu.se
passwordstate.it.liu.se
medlem.stuff.liu.se
testbuss.test.it.liu.se
guide.bibl.liu.se
notificationhubproxy.test.it.liu.se
systemview.it.liu.se
httpkom.lysator.liu.se
tp.on.liu.se
medlem.stuff.liu.se
dashboard.test.it.liu.se
cms.ifm.liu.se
x-sys.itn.liu.se
journey.test.it.liu.se
c-zabbix2.itn.liu.se
medreg.lysator.liu.se
studentspex.se
atlas-cache03.bluegrass.nsc.liu.se
lisamadmin.app.test.cloud.it.liu.se
medlem.stuff.liu.se
vpn.it.liu.se
resebokning.liu.se
lists.ifm.liu.se
vastgota.nation.liu.se
ctrl-c.liu.se
search.liu.se
snicdocs.nsc.liu.se
sc2-dev-cm.test.ad.liu.se
remindme.isv.liu.se
teachings.app.test.cloud.it.liu.se
www.conference4.ep.liu.se
www.conference2.ep.liu.se
rag.lysator.liu.se
jamf1.test.ad.liu.se
pf-test.it.liu.se
racing.lysator.liu.se
nagios.ifm.liu.se
service.test.integration.it.liu.se
bokabil.it.liu.se
pulp2.it.liu.se
ysektionen.se
lkpws3.ad.liu.se
qv.it.liu.se
projects.itn.liu.se
valuationstudies.liu.se
gmproxy.test.it.liu.se
webmail.ifm.liu.se
datorhandbok.lysator.liu.se
talprod.it.liu.se
cisco-vpn.ifm.liu.se
www2.itn.liu.se
nikita.itn.liu.se
mail.liu.se
ctrl-c.liu.se
cms.ifm.liu.se
podd.itn.liu.se
Certificate
The complete raw certificate details for cisco-vpn.ifm.liu.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIQDMbNMjXd6qH0FLY01PfXfjANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0xODA5MDcwMDAwMDBaFw0yMDA5MTExMjAwMDBaMHExCzAJBgNVBAYT AlNFMRMwEQYDVQQHDApMaW5rw7ZwaW5nMSAwHgYDVQQKDBdMaW5rw7ZwaW5ncyB1 bml2ZXJzaXRldDEMMAoGA1UECxMDSUZNMR0wGwYDVQQDExRjaXNjby12cG4uaWZt LmxpdS5zZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMGPZFGTu122 zW2yJsq/4901zdbr3ZIMDbArBFvCzlHMysFC6rycNQzGXt3ytgAlM5an4+xRjNHC KQgUqWfDaCQM371Nz+jhk5/UVn2R+dHeTVqJrkcOh+CZPXPwmxO8fGPKZvdncmID jcqZMi8g8IbehIDDt2LpZbGtCPNZXGdA6xM2DSjsR8H+HEZ59xOAxwN8SRgJS6C3 7+Raujk1+1hesCSb5VuXppasGLL8FjM1sry5U/IoQW5ensvQ+su0qau3gN7xAhuD TnHGIXtOn2rTNiPHe1sNHeG1JD+4IMs3RthctHtzsrBaVnIajVqoZI6XPb5zMWuS EVMqJJmRst0CAwEAAaOCAeIwggHeMB8GA1UdIwQYMBaAFGf9iCAUJ5jHCdIlGbvp URFjdVBiMB0GA1UdDgQWBBSZdcdkc9I/Ys/izSd5aR00Y3dJxTAfBgNVHREEGDAW ghRjaXNjby12cG4uaWZtLmxpdS5zZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9j cmwzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3JsMC+gLaArhilodHRwOi8v Y3JsNC5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNybDBMBgNVHSAERTBDMDcG CWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j b20vQ1BTMAgGBmeBDAECAjBuBggrBgEFBQcBAQRiMGAwJAYIKwYBBQUHMAGGGGh0 dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA4BggrBgEFBQcwAoYsaHR0cDovL2NhY2Vy dHMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcnQwDAYDVR0TAQH/BAIwADAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcI4gHaQ50uhb JOw40qHGaaL+dFJbCs5nVig1ZjQ9oqpfJeHKzmBHR3jFKbo3DUGOrTKGhIWwNANR vWU5D55thAnLVqM7xZmUt2wlrBwqVlVxfy3sz3OFN9xNS1BSzSwsNRSQwSa2GgUz PXKuwG/FnEn3Rov+6zm9brFXR8+zSQbS87Ryc6h1sh2AAy0H+YR8PGESpU9cjOQY cZEBj6iSvGw3tsMZzaGYZYHS6m1Lq+FTV7sGwXfvMZ2wQ7YPy63X9tKkd4WChJK1 VKbXszUKegmAqxb8GdtWZP90gl+9hPwR7NETBlHzz0FWqG0sPSuU3OHmcSa4g+eh oIBejFNf+g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY9kUZO7XbbNbbImyr/j 3TXN1uvdkgwNsCsEW8LOUczKwULqvJw1DMZe3fK2ACUzlqfj7FGM0cIpCBSpZ8No JAzfvU3P6OGTn9RWfZH50d5NWomuRw6H4Jk9c/CbE7x8Y8pm92dyYgONypkyLyDw ht6EgMO3Yullsa0I81lcZ0DrEzYNKOxHwf4cRnn3E4DHA3xJGAlLoLfv5Fq6OTX7 WF6wJJvlW5emlqwYsvwWMzWyvLlT8ihBbl6ey9D6y7Spq7eA3vECG4NOccYhe06f atM2I8d7Ww0d4bUkP7ggyzdG2Fy0e3OysFpWchqNWqhkjpc9vnMxa5IRUyokmZGy 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16982972599456746798885303697318336382 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Linköping' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Linköpings universitet' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IFM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cisco-vpn.ifm.liu.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24434702024798349664455230378067507987611417487994171677612978558599071592638328823462290943288520806414403323328968282651601763737125663184000383572356832315408847470594495314951207670721077773273380354388127661228268256012707025905980089393064664065162837878338705027570203891718377240571709660493754874404925598761410517920995822520081734150283540261573644031602888343224367634202664424916465478074091280708526633514402886268747487928137564659915998543108715751659069839052662548057463085850955168269323021100818099977410719272289457215679526570161974833751585598010118553140636266741132319454526340337775617880797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9975c76473d23f62cfe2cd2779691d34637749c5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisco-vpn.ifm.liu.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00708e201da439d2e85b24ec38d2a1c669a2fe74525b0ace6756283566343da2aa5f25e1cace60474778c529ba370d418ead32868485b0340351bd65390f9e6d8409cb56a33bc59994b76c25ac1c2a5655717f2deccf738537dc4d4b5052cd2c2c351490c126b61a05333d72aec06fc59c49f7468bfeeb39bd6eb15747cfb34906d2f3b47273a875b21d80032d07f9847c3c6112a54f5c8ce4187191018fa892bc6c37b6c319cda1986581d2ea6d4babe15357bb06c177ef319db043b60fcbadd7f6d2a47785828492b554a6d7b3350a7a0980ab16fc19db5664ff74825fbd84fc11ecd1130651f3cf4156a86d2c3d2b94dce1e67126b883e7a1a0805e8c535ffa