sterz3test.stmk.gv.at

- Amt der Steiermaerkischen Landesregierung -

Issued by TERENA SSL High Assurance CA 3

About this certificate

This digital certificate with serial number 0e:78:86:0b:c1:d1:a7:34:c2:c6:50:20:01:96:c9:e8 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Amt der Steiermaerkischen Landesregierung

Company registration number: Government Entity
Organization: Amt der Steiermaerkischen Landesregierung
Organization unit: ABT01
Locality: Graz
Country: AT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:78:86:0b:c1:d1:a7:34:c2:c6:50:20:01:96:c9:e8
Serial Number (int): 19234986338393740517108861076273285608
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f0:72:59:62:05:bc:7b:b3:04:4e:0d:32:a6:02:5b:54:4f:4f:21:46
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9

Fingerprint (sha1): de:82:a2:8c:a0:c8:06:02:5d:26:1e:79:9f:e5:2c:a9:2d:ef:c0:98
Fingerprint (sha256): 0c:c6:ce:98:fd:61:84:48:40:f6:03:54:ac:31:b9:9c:ed:fc:59:3b:3e:d7:02:cd:d6:f3:33:58:e7:70:98:2b

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl

Check the revocation status for certificate sterz3test.stmk.gv.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sterz3test.stmk.gv.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sterz3test.stmk.gv.at
www.sterz3test.stmk.gv.at

Other certificates including the domain name stmk.gv.at

(limited to 100 certificates)
wis.stmk.gv.at
ctxshare.stmk.gv.at
egovtest.stmk.gv.at
sterztest.stmk.gv.at
pallast2.stmk.gv.at
citrix-ag.stmk.gv.at
citrix-test.stmk.gv.at
pallast2.stmk.gv.at
moatest.stmk.gv.at
moa.stmk.gv.at
pi-test.stmk.gv.at
xmtest.stmk.gv.at
xmtest.stmk.gv.at
moatest.stmk.gv.at
sterz3test.stmk.gv.at
datenschutz.stmk.gv.at
pallast2.stmk.gv.at
egov.stmk.gv.at
sterz3test.stmk.gv.at
xmtest.stmk.gv.at
wis.stmk.gv.at
ref-test.stmk.gv.at
moatest.stmk.gv.at
pallasttest.stmk.gv.at
egov.stmk.gv.at
sanis.stmk.gv.at
egov.stmk.gv.at
digitaltest.stmk.gv.at
ref-test.stmk.gv.at
autodiscover.stmk.gv.at
wis.stmk.gv.at
citrix-ag.stmk.gv.at
lyncrp.stmk.gv.at
sanis.stmk.gv.at
gis.stmk.gv.at
wis.stmk.gv.at
rsa.stmk.gv.at
sterztest.stmk.gv.at
ngmxm.stmk.gv.at
pvptest.stmk.gv.at
citrix-ag.stmk.gv.at
sanis.stmk.gv.at
pallast2.stmk.gv.at
sterztest.stmk.gv.at
modestest.stmk.gv.at
wis.stmk.gv.at
sanis.stmk.gv.at
sterz3.stmk.gv.at
adfs.stmk.gv.at
pallast-schulung.stmk.gv.at
nstest.stmk.gv.at
sterztest.stmk.gv.at
citrix-ag.stmk.gv.at
egov.stmk.gv.at
mail2.stmk.gv.at
datenschutz.stmk.gv.at
sterz3.stmk.gv.at
citrix-test.stmk.gv.at
jobs.stmk.gv.at
datenschutz.stmk.gv.at
sterz3.stmk.gv.at
egovtest.stmk.gv.at
samlawptest.stmk.gv.at
ctxmxm-test.stmk.gv.at
ctxsharetest.stmk.gv.at
nstest.stmk.gv.at
vpn-ns.stmk.gv.at
sterztest.stmk.gv.at
as.stmk.gv.at
lyncrp.stmk.gv.at
moatest.stmk.gv.at
sanis.stmk.gv.at
test-app.stmk.gv.at
lib.stmk.gv.at
ngmodestest.stmk.gv.at
wis.stmk.gv.at
bergapp.stmk.gv.at
webmail.stmk.gv.at
sterztest.stmk.gv.at
modestest.stmk.gv.at
literatur.stmk.gv.at
literatur.stmk.gv.at
pallast.stmk.gv.at
jobs.stmk.gv.at
moa.stmk.gv.at
rsa.stmk.gv.at
moa.stmk.gv.at
gis.stmk.gv.at
egovtest.stmk.gv.at
auth.stmk.gv.at
lyncrp.stmk.gv.at
xm.stmk.gv.at
nstest.stmk.gv.at
service.stmk.gv.at
pallast2.stmk.gv.at
egovtest.stmk.gv.at
pvp.stmk.gv.at
as.stmk.gv.at
xm.stmk.gv.at
pi.stmk.gv.at

Certificate

The complete raw certificate details for sterz3test.stmk.gv.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDpo83XukEYisZ5tvH9i
5ekW+yDLdfzUBxjJUr312iRuizykifMBxrGxSIta97hec7pzxVlqY4SIPjOVLlMF
30NSVP++UBV+JSiiX1TWxaSMGhgDmhrbYil6HJiL2quvRifEEHUiqg9DRFabrgA9
zaJFPBeGEum+JrspzQgJJ4VTiucDngh85PCcBsAB+LTqWMCO3bufk5As6yUd+GCA
BsyLnRsRUQ9A6Ao9WuJqBWKZrhBSBcRQYAq1TqI1PKYCa/pCGX0zU8fB1SzQNAWg
BAjKsgo7prx5phwgyD0zKne0KmpIQ0xSaqK/Q/T92+/+1HnUEzL8wFvn2kfdfCBS
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19234986338393740517108861076273285608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Graz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amt der Steiermaerkischen Landesregierung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ABT01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sterz3test.stmk.gv.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18712072162179802694095080599188376967355834796046256613003820589067348662662967299698008432328315374809469881382676628941433385254675552009867567521930505637815238106364839944775846201619169418870064344303233073461219734370313901442318020697574474192803148751552880051750382967948505847813666255432012360625509739086537999745884558239434266297566934807103068098225979417929845641061249069313784816472055199136945150977201251216637471780121551428185812769777259475826263921049904337501629136137381975980333792136118922241232617919367910920610557453144197898218849025088605865676402808645620815729268390603063142928987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f072596205bc7bb3044e0d32a6025b544f4f2146
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterz3test.stmk.gv.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterz3test.stmk.gv.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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