certbroker.service.eur.nl

- Erasmus Universiteit Rotterdam -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 02:9a:e3:4c:e6:59:bb:07:8d:25:ca:fe:07:7a:83:fd was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Erasmus Universiteit Rotterdam

Organization: Erasmus Universiteit Rotterdam
Locality: Rotterdam
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:9a:e3:4c:e6:59:bb:07:8d:25:ca:fe:07:7a:83:fd
Serial Number (int): 3462679907394605092562535159395156989
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f5:20:f7:ca:2c:a3:04:b2:09:3a:19:dc:05:4e:10:d2:ff:97:02:3c
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): e2:e9:c0:02:70:0c:6d:11:5a:51:86:7b:c0:40:71:96:c9:3e:7b:b3
Fingerprint (sha256): 0b:a1:a2:25:11:60:a6:5c:20:dc:0e:79:59:be:35:ea:13:7c:67:49:dd:dc:97:71:1b:a9:fc:93:45:4c:4f:73

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate certbroker.service.eur.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for certbroker.service.eur.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

certbroker.service.eur.nl

Other certificates including the domain name eur.nl

(limited to 100 certificates)
h5p.eur.nl
dialogicplatform.com
db-bundle.sin-online.nl
www.erim.eur.nl
masterhealtheconomics.eur.nl
dialogicplatform.com
monitor.mgt.eur.nl
topdesk.eur.nl
psp.eur.nl
feb21011.ese.eur.nl
superoffice.holding.eur.nl
gallery.erim.eur.nl
login-accept.ds.eur.nl
pma.eur.nl
Bizzdesing.eur.nl
www1.eur.nl
alumni.eur.nl
sin-online-service-bundle.service.eur.nl
bko.eur.nl
asklepios.eur.nl
mybeta.eur.nl
overleg.eur.nl
people.few.eur.nl
ess.eur.nl
www.horafinita-accept.eur.nl
ess-test.eur.nl
timetables.eur.nl
thetheorymarket.eur.nl
mis-api-test.erim.eur.nl
hawk.eur.nl
rdbroker20-test.eur.nl
ns1.bvdu.eur.nl
ebs.eur.nl
resourcebooker.eur.nl
masterinternationalandeuropeanpubliclaw.eur.nl
www.webshop.eur.nl
trackeur-bundle.api.eur.nl
vrh56.eur.nl
sap-bo-test.eur.nl
sis-acc-saml.eur.nl
dialogicplatform.com
cms-intra-test.eur.nl
nagiosbe.eur.nl
sympa-test.eur.nl
dialogicplatform.com
rdbroker-test.eur.nl
timetables.eur.nl
pclab-monitor.eur.nl
tartaros3.eur.nl
issuetracker.eur.nl
eurgame.eur.nl
aux-ldap-bundle.service.eur.nl
adminer.service.eur.nl
edugateway-G2.eur.nl
expertise-search-test.rsm.nl
horafinita.eur.nl
sm.eur.nl
studielink.eur.nl
iwmc-accept.service.eur.nl
eshcc-app.eur.nl
auth4mobile.eur.nl
rstudio.erim.eur.nl
ln-fe-pool.t-staff.eur.nl
planonweb.eur.nl
overleg.dia.eur.nl
sis-saml.eur.nl
saml-cms-intra-test.eur.nl
bskweb.eur.nl
crm4p-acc.eur.nl
sis-acc.eur.nl
examsheet.eur.nl
mailing-law.eur.nl
ds.eur.nl
www1.eur.nl
DA2016.eur.nl
EMS-ACC.EUR.NL
vacancies.eur.nl
eduroam-guest.eur.nl
wiki.fbk.eur.nl
libguides.eur.nl
sisapi-accept.eur.nl
sin-app03.app.eur.nl
sustainabilityreport.eur.nl
mydesktop.eur.nl
sb-test.eur.nl
myapps.eur.nl
access.eur.nl
masterrechtsgeleerdheid.eur.nl
isis.fbk.eur.nl
personal.eur.nl
foreman-test.infra.eur.nl
esl.eur.nl
eurgame-accept.eur.nl
feb22012.ese.eur.nl
certbroker.service.eur.nl
hobbes.frg.eur.nl
foreman-test.infra.eur.nl
ecda.eur.nl
gen-web01.app.eur.nl
dashboard.eur.nl

Certificate

The complete raw certificate details for certbroker.service.eur.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIQAprjTOZZuweNJcr+B3qD/TANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xOTA1MTYwMDAwMDBaFw0yMTA1MjAxMjAwMDBaMG4xCzAJBgNVBAYT
Ak5MMRIwEAYDVQQHEwlSb3R0ZXJkYW0xJzAlBgNVBAoTHkVyYXNtdXMgVW5pdmVy
c2l0ZWl0IFJvdHRlcmRhbTEiMCAGA1UEAxMZY2VydGJyb2tlci5zZXJ2aWNlLmV1
ci5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALTVUzC4n0yN6c56
3ZgyVlUiJHMqd8WENwqlO6chIlj5islH7nVYh2KZCmIW6MSokHLCSLwU6SUTludK
PhVWCEemPXobMY4hQkHlEvUERdex2N3a1COBc8rBPberV0twBQXnai16G+MbQLo1
3/T7nF4DkOsxMc+cuWRnDfQ5ydSWhjIC4iqewanB2n2G7XZjfeK4BWPGTc4Z6WAr
wGoSCjLFISXwkbo1pg5JZbkBOcYqVse5QQEzWC5bqmVvrzvzoDpgHd4FKcGj97gA
ZGsJDBjcPmuLhjzCu206aFLyviwzNb0yTan33K6hcEIXh7srt8E6YW4m21X/Th3t
7H9xzYcueNbsp1Pp4rWQQMDEcHtLLOmz+6CiA2N/n6/3PP31QaE3BSe5o9ett9iE
p0I5sojWdsWa41UwRH4o6yGZO5Gz6Vh+M4c5ZNkmbPNbhn9IB7QeEzKRaHzJiAdC
HwMpsPjtKdsWNc4pW/7UGA7NIs0728agMkrw/9GGt6pkIfBA38W2el54EFv8b87L
a4g2+pH2klCwazkw3njqlLjMckefQB5JLOWJXOanAmyPaJTOfspVDJ/UkLnMQijU
6uCOssrdNZ81VJSMfPn0IX/YB1+0rJYqNgp7HKi6Ivce9KP2RtYDcIGWVVF4BSbp
B41Pq15nzhIT8DO+2qIZPTPX3OlJAgMBAAGjggHnMIIB4zAfBgNVHSMEGDAWgBRn
/YggFCeYxwnSJRm76VERY3VQYjAdBgNVHQ4EFgQU9SD3yiyjBLIJOhncBU4Q0v+X
AjwwJAYDVR0RBB0wG4IZY2VydGJyb2tlci5zZXJ2aWNlLmV1ci5ubDAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRk
MGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMu
Y3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0Ez
LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRw
czovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjBuBggrBgEFBQcBAQRi
MGAwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA4BggrBgEF
BQcwAoYsaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5j
cnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAryQWs80Md5HQnvVSrNB9/yD/OrfjCzP2lOHvrbAflHB1rBJ5PO6g
CWXzJjbfh/YiuIeuEQ9cU8Qlr0Y7fgoZ0ZIPcxqeNp5eShS/c7N89ZriSoc2+m03
ezF+HI3Dog6IOi1L9/qD5XzROF+hdaFzErRoMF3ocjZpsZvB2GD+yMNmnKcCqRnK
QCxOcDKjuVV5SN5jMpZ5o6QG45i4DwjFDLFEmwmNI12OrYaqJHIlN0Ewm2NQnfRc
vb0hzT7iOuf/ZMFTe8FXNM0izdgttOmSQb+5GXMCVnSkLVei4a1uvnlgYH9YVsXJ
UarpNGdRZhd3fa43dBWmrqex5XdHK5iLVw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtNVTMLifTI3pznrdmDJW
VSIkcyp3xYQ3CqU7pyEiWPmKyUfudViHYpkKYhboxKiQcsJIvBTpJROW50o+FVYI
R6Y9ehsxjiFCQeUS9QRF17HY3drUI4FzysE9t6tXS3AFBedqLXob4xtAujXf9Puc
XgOQ6zExz5y5ZGcN9DnJ1JaGMgLiKp7BqcHafYbtdmN94rgFY8ZNzhnpYCvAahIK
MsUhJfCRujWmDklluQE5xipWx7lBATNYLluqZW+vO/OgOmAd3gUpwaP3uABkawkM
GNw+a4uGPMK7bTpoUvK+LDM1vTJNqffcrqFwQheHuyu3wTphbibbVf9OHe3sf3HN
hy541uynU+nitZBAwMRwe0ss6bP7oKIDY3+fr/c8/fVBoTcFJ7mj16232ISnQjmy
iNZ2xZrjVTBEfijrIZk7kbPpWH4zhzlk2SZs81uGf0gHtB4TMpFofMmIB0IfAymw
+O0p2xY1zilb/tQYDs0izTvbxqAySvD/0Ya3qmQh8EDfxbZ6XngQW/xvzstriDb6
kfaSULBrOTDeeOqUuMxyR59AHkks5Ylc5qcCbI9olM5+ylUMn9SQucxCKNTq4I6y
yt01nzVUlIx8+fQhf9gHX7Sslio2CnscqLoi9x70o/ZG1gNwgZZVUXgFJukHjU+r
XmfOEhPwM77aohk9M9fc6UkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3462679907394605092562535159395156989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erasmus Universiteit Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certbroker.service.eur.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737735502229962040545304490126846182676248685536063921694001388452556663784219216708142990263804064096574868452668795681464384194571842076747047009274183571123808493046552134768570874673915942069228926094940457525681845181201497965574700606870074614478220733491589497234264789989042497536350592748995345823710626156609350049927023385687680972459393443205838406403653913586264864887625229100178626479701238360076706670108616976556938108289853304286808510761523669000898057449187756933765516283657791650160226713925998329243250017006483376294728153035012233438870156766806793604215464562235343255030006656719606791763873592205013917242772154053901443098438256335268085138376908251435923582158106157249888683836800796794348637964570588859054488372992931652260847802102448471562403438299775453483672231113906781885623318290199225479777275511526630924696216539064133335331166562940532208462797466788396637431249752617288014433682960337952201032169261905990381140520957174568922147913150333357251863775956104625235155189915140862970951992062007353680871073090596918760563890652737165210499033848049203265427747978905601493525748864460940482619573774883048219750227224443237120632659651339337323732284356759715137645697007255521114619439433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f520f7ca2ca304b2093a19dc054e10d2ff97023c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certbroker.service.eur.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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