secureimap.springernature.com

- Springer Science+Business Media -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 03:49:6e:10:00:f1:ac:3d:80:e9:7b:19:60:57:0e:67 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Springer Science+Business Media

Organization: Springer Science+Business Media
Locality: Dordrecht
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:6e:10:00:f1:ac:3d:80:e9:7b:19:60:57:0e:67
Serial Number (int): 4368953991026956451672841868931436135
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 46:70:9e:16:81:c7:f1:1e:c8:01:8d:ba:d0:9e:f6:c8:ff:45:be:bd
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 4e:95:f8:71:38:a5:f9:04:20:98:bf:3d:15:ee:11:8e:9c:16:a7:c8
Fingerprint (sha256): 0f:77:a2:8d:ae:55:4f:6f:55:81:d7:92:bc:57:a3:91:cf:5b:0b:40:d1:7c:ca:70:f9:21:9c:85:6d:36:37:22

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate secureimap.springernature.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secureimap.springernature.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secureimap.springernature.com

Other certificates including the domain name springernature.com

(limited to 100 certificates)
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
www.highq.com
auth.springernature.com
springer2.map.fastly.net
*.springernature.com
springer3.map.fastly.net
springer2.map.fastly.net
more-media.springernature.com
sn-prod-simac-alarm-01.springernature.com
support.khipu-networks.com
idtest.springernature.com
vanity4.jiveon.com
springer2.map.fastly.net
*.springer.com
authorservices.springernature.com
vpn-africa.springernature.com
adportal.springernature.com
sustainabilitycommunity.springernature.com
dns-vetting1i.map.fastly.net
uim.springernature.com
protocolsmethods.springernature.com
liferay-dev.springernature.com
scim-1password.springernature.com
uxresearch.springernature.com
vanity4.jiveon.com
bflux-stage-es-02.springernature.com
mee-uat.springernature.com
springer2.map.fastly.net
*.springernature.com
communities.springernature.com
shopify-qa.springernature.com
springer2.map.fastly.net
images.passendo.com
*.chef.tools.cm.springernature.com
springer2.map.fastly.net
dev.springernature.com
springer2.map.fastly.net
staging-scigraph.springernature.com
dns-vetting1i.map.fastly.net
vpn-aus.springernature.com
grandchallenges.springernature.com
springer2.map.fastly.net
vanity4.jiveon.com
vpn-gcp.springernature.com
authorservices.springernature.com
support.khipu-networks.com
support.springernature.com
secureimap.springernature.com
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
authorservices.springernature.com
vpn-ro.springernature.com
springer2.map.fastly.net
*.jiveon.com
staging.moody.springernature.com
authorservices.springernature.com
integration-sn-insights.springernature.com
images.passendo.com
springernature.com
www.highq.com
dns-vetting1i.map.fastly.net
dns-vetting1i.map.fastly.net
www.highq.com
vpn-ro.springernature.com
dns-vetting1i.map.fastly.net
trust.springernature.com
images.passendo.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
springer2.map.fastly.net
api.more-media.springernature.com
www.highq.com
securesmtp.springernature.com
nature-ww.springernature.com
*.springer.com
protocolsmethods.springernature.com
vpn.springernature.com
vpn.springernature.com
springer2.map.fastly.net
authorservices.springernature.com
springer2.map.fastly.net
images.passendo.com
*.springer.com
springer2.map.fastly.net
www.highq.com
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
hub.springernature.com
springer2.map.fastly.net
researchdata.springernature.com
dns-vetting1i.map.fastly.net
delivery.staging-cms.springernature.com
dev.springernature.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
springer2.map.fastly.net

Certificate

The complete raw certificate details for secureimap.springernature.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIQA0luEADxrD2A6XsZYFcOZzANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xODAyMjcwMDAwMDBaFw0yMDAzMDMxMjAwMDBaMHMxCzAJBgNVBAYT
Ak5MMRIwEAYDVQQHEwlEb3JkcmVjaHQxKDAmBgNVBAoTH1NwcmluZ2VyIFNjaWVu
Y2UrQnVzaW5lc3MgTWVkaWExJjAkBgNVBAMTHXNlY3VyZWltYXAuc3ByaW5nZXJu
YXR1cmUuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkZzBlT81
7ulgKBTM1XCnbCo9PdXIJErMS3i7wt8RQH8UcL+fXhLLjiwI9M7rMSVFKxqzK3eG
Q1t7NYmI1zbY2y2Gys6whC8+J1bF7Dy4DTYWjz51QSgdq1R0V2EKTbUUKNWRnjWO
P6Mhiq+gdKglnu6ze7BhRFx4/lfo0oMFiTImD95E/lJvjAs0Ni6f1mO2VsvYN5BC
1B86gxTPRUqMBGHnKbPK1nFycOfnBy7vDocCDWoEBJC+GnTwmN7bZfPDWTz6WWIJ
nv1Z91di7/UTptxffNhQzcey5TtQIKamBtPxOq63zKNRrdJS4eZ7gdSTbV05IfGJ
bdorXhzylrjHQfJC+FXDRGj9pFhSpTavL1wQQYOrvrMwMelq6tt+YzI8dQyksmt3
/9rnc9KGD9CBbP04Z9jJiIC1rDqrZ4rK5AV6t9Oh/sT9Rhf6twlLLIsvEJ96dpYo
VTwTLCKTRWdF95QFa3eXSHOkL8t5FLn7db7o91jE0vmSZ5Z+dt+DyMAyPqBcGy6Z
weFF4nF4vJoMIcx48bF2t5Mp65o8ypyY9pvUcps2740DgQ/CRl2b8etQ+zJ12JEY
Ybv6fiEWhspyl0FxklqOPnWjL5m141ZHdmc4c2SdqjTmfGS8Z6IqJeSd85UV89vy
AyB5izHr1NZw+kZ8ig+v4BZv1IRfJoSEB1ECAwEAAaOCAeswggHnMB8GA1UdIwQY
MBaAFGf9iCAUJ5jHCdIlGbvpURFjdVBiMB0GA1UdDgQWBBRGcJ4WgcfxHsgBjbrQ
nvbI/0W+vTAoBgNVHREEITAfgh1zZWN1cmVpbWFwLnNwcmluZ2VybmF0dXJlLmNv
bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9URVJF
TkFTU0xDQTMuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vVEVS
RU5BU1NMQ0EzLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUF
BwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjBuBggr
BgEFBQcBAQRiMGAwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv
bTA4BggrBgEFBQcwAoYsaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL1RFUkVO
QVNTTENBMy5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEAaFXoVpCeWL/lkU2OETxVMaiISvix/D9ofy4u6TOn
XNZglykRAzjaz4ymV8PLlaSm2F0VnqcOcxyaDEEXNDavKemRPYWjcLyKRoyCuh0P
TVqdu51r9TfV87gNzeJxe4zSrZqN+20jYN0IeOq4b2naR996YI5iJ0mDleKRysDX
e0R8m9H/pkMEsq+Mqwr1lDBSXLnTNthC2466TDzZsyv3vVruQ0/V4l7G324FL4wl
nnX7PovsZBUxLReHLpA+tYrpVkZ/4Ihj9qk+qnnkvS8iwzbSnh731M6RbX5tBJjC
IUJ8FV8hu1CyRF0rdAR8Id2Bd9bPdzmlukOgQp8L0nMcIw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4368953991026956451672841868931436135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dordrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Springer Science+Business Media'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secureimap.springernature.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 594046473591263258189787004832212107741307690303999665437470445142398810314839944855835363677514378758010756015030540443958438705584784427964800809444345160692667251923437101541025564148933320893080949107382486821202692376958818067991816971335845991952479795465485965621641345583359370666841409391965938138769316321601693213425331096915389486641671402157168559154636904289056896180905301264498160326331567536576937968201071199048593154077075805270576006087440272205585964780738770084385144539391999008703760862884681014878182204571056117529886017948366815720725220252025248895196676054432679894545243426391223284308029665760356676654977952116869512624860771677451288887729079567191685021863378171821918956683375652609963188960426748337717195488799553815417054412185676835364098422418972739990296518171956369839686648715725468403963499440019628576970605700307335610297336091596450093671790352252272539902495641227012902823598476640558415594337592611191691848275791898151819377979752551131893675510852413461655129821227795779265446859527117502050910918895721951016366729264807672347765218388591431687961134101686345520413698362476716933487936921775684399029689423182255687778323322320429131067900518022017314776529774426798848234227537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46709e1681c7f11ec8018dbad09ef6c8ff45bebd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureimap.springernature.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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