if-forge.ujf-grenoble.fr

- Université Grenoble Alpes -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 02:51:8c:9e:12:cb:93:99:c1:dd:3b:b5:3a:d4:52:0c was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Grenoble Alpes

Organization: Université Grenoble Alpes
Organization unit: Institut Fourier
State / Province: Isère
Locality: Saint-Martin D'Hères
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:51:8c:9e:12:cb:93:99:c1:dd:3b:b5:3a:d4:52:0c
Serial Number (int): 3081884098322180413703470062006194700
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a5:9f:de:45:19:90:d6:90:58:96:ba:fb:d0:f0:d8:ac:7a:d5:1b:ed
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): a7:af:86:15:b2:85:43:92:a1:e2:22:14:15:19:14:e1:4d:47:2e:68
Fingerprint (sha256): 12:17:22:29:21:ff:dc:50:40:43:5a:75:f1:1f:a6:c7:3e:68:82:9a:ac:3b:bd:02:48:ee:e7:78:ae:8b:83:33

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate if-forge.ujf-grenoble.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for if-forge.ujf-grenoble.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

if-forge.ujf-grenoble.fr
if-forge.univ-grenoble-alpes.fr

Other certificates including the domain name ujf-grenoble.fr

(limited to 100 certificates)
*.ujf-grenoble.fr
iufm-crest.ujf-grenoble.fr
ciment-grid.ujf-grenoble.fr
www-fourier.univ-grenoble-alpes.fr
osug-sshade.ujf-grenoble.fr
ifmail.univ-grenoble-alpes.fr
osug-sshade-dev.ujf-grenoble.fr
ficel.ujf-grenoble.fr
ist-web3.ujf-grenoble.fr
*.ujf-grenoble.fr
ufrim2ag.ujf-grenoble.fr
gin-serv.univ-grenoble-alpes.fr
shibboleth.ujf-grenoble.fr
bfs.ujf-grenoble.fr
iut-scodoc7.ujf-grenoble.fr
iut-bdr2.ujf-grenoble.fr
*.ujf-grenoble.fr
ifmission.ujf-grenoble.fr
if-forge.ujf-grenoble.fr
oidb.ujf-grenoble.fr
www-liphy.ujf-grenoble.fr
www-fourier.ujf-grenoble.fr
osug-sshade.ujf-grenoble.fr
im2ag-sgce.e.univ-grenoble-alpes.fr
perseus.ujf-grenoble.fr
ciment-grid.ujf-grenoble.fr
sum-graf.univ-grenoble-alpes.fr
*.ujf-grenoble.fr
fourier.univ-grenoble-alpes.fr
incidents.ujf-grenoble.fr
ist-backuppc-win.ujf-grenoble.fr
wikosug.ujf-grenoble.fr
visio.ujf-grenoble.fr
*.ujf-grenoble.fr
ist-sismalp.osug.fr
ipag-cms1.ujf-grenoble.fr
veli.obs.ujf-grenoble.fr
*.ujf-grenoble.fr
im2ag-wiki.univ-grenoble-alpes.fr
intragere.ujf-grenoble.fr
www-fourier.ujf-grenoble.fr
fourier.ujf-grenoble.fr
ist-web2.ujf-grenoble.fr
gin11-web.univ-grenoble-alpes.fr
*.ujf-grenoble.fr
if-forge.univ-grenoble-alpes.fr
if-forge.ujf-grenoble.fr
ist-web2.ujf-grenoble.fr
www-liphy.ujf-grenoble.fr
bfs.ujf-grenoble.fr
ist-web2.univ-grenoble-alpes.fr
ipag-wiki.ujf-grenoble.fr
wikosug.ujf-grenoble.fr
osug-sshade-dev.ujf-grenoble.fr
iufm-imap.ujf-grenoble.fr
ufrim2ag.univ-grenoble-alpes.fr
vm-mail-isterre.ujf-grenoble.fr
webmail.ujf-grenoble.fr
perseus.ujf-grenoble.fr
*.ujf-grenoble.fr
killeen.univ-grenoble-alpes.fr
perseus.univ-grenoble-alpes.fr
gin11-git.ujf-grenoble.fr
im2ag-sgce.e.univ-grenoble-alpes.fr
iufm-webinfo2.ujf-grenoble.fr
osug-sshade.ujf-grenoble.fr
perseus.univ-grenoble-alpes.fr
ufrim2ag.univ-grenoble-alpes.fr
ipag-wiki.ujf-grenoble.fr
gin11-wiki.ujf-grenoble.fr
ciment-grid.ujf-grenoble.fr
gps-isterre.univ-grenoble-alpes.fr
zimbra.ujf-grenoble.fr
jmmc.obs.ujf-grenoble.fr
jean-virieux.univ-grenoble-alpes.fr
*.ujf-grenoble.fr
smith.ujf-grenoble.fr
im2ag-wiki.univ-grenoble-alpes.fr
osug-sshade-dev.ujf-grenoble.fr
osug-sshade.ujf-grenoble.fr
ciment.univ-grenoble-alpes.fr
dsi-adminpasswd.ujf-grenoble.fr
gin11-groupware.ujf-grenoble.fr
www-fourier.ujf-grenoble.fr
osug-sshade.ujf-grenoble.fr
ist-web3.ujf-grenoble.fr
*.ujf-grenoble.fr
osug-owncloud.ujf-grenoble.fr
shibboleth.ujf-grenoble.fr
im2ag-incidents.e.ujf-grenoble.fr
fourier.ujf-grenoble.fr
iufm-ema.ujf-grenoble.fr
ciment-grid.ujf-grenoble.fr
www-liphy.ujf-grenoble.fr
ist-web3.ujf-grenoble.fr
epti.isterre.fr
intragere.ujf-grenoble.fr
vm-mail-isterre.ujf-grenoble.fr
im2ag-goedel.univ-grenoble-alpes.fr
perseus.ujf-grenoble.fr

Certificate

The complete raw certificate details for if-forge.ujf-grenoble.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw9VzSbz9YoSIe6Ejgt9
aPEtWOx6SyDngFXyVmCO8Ep5EvCq1Ta4CgCa9wpRDDxJBByXftzjvurG9CP1d4eD
kJl6JP57aTci/hSlts4ComD08VBoQmfNRn2QMGJLg5Ma0IIE7OY7EAWMNd0+YUjD
s7lVEIo0Eu8LU6Oo27GzPnNiETmrR7bfqcxYAQKHlFUgGS1uKpYVvsqxwVd36TQ/
lTHENpwR1lVhcV0XoPv9dL2WRHKpMCItu+TT0sbib15VcBb8PTKGjNm/VE8eWJJC
/uwM3JMRcPoRVpPYhvDVgSIMJZhPN7CrVnCcb9jyaYknn/dzYGJeIZnv/691sv+v
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3081884098322180413703470062006194700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Isère'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint-Martin D'Hères'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Grenoble Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Institut Fourier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'if-forge.ujf-grenoble.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25633937958147930282298638475103004650128490303088446724758396664838907700398249150262619103910150162401946501122208366710541710635567626807318230132912242349665925432180044030094599649273574960484554473619793368140308836780942943610933006192003015177860112738432068692453254165343782111875295000177158984169248899122160799837489949021185120666099131084650478735760929572423130727271310415016448794700256689050707963519959739511131626854008130159655278450039838640887542420084517939870210027496664209439878799374609973170896260287615075317949965166857274588959281372051193682875397970265352173398260184806303220084593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a59fde451990d6905896bafbd0f0d8ac7ad51bed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'if-forge.ujf-grenoble.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'if-forge.univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bd21aa9b940e10cbda9336d79c15895dea1b24a6eb52ec11ecf2e989628bd50913edf6579914469b2538263e5a42adba1c8b33a3436da39dd277e0abf0e35a1efcd137739456175234b4d0df9aa01894a4ec44b0ebc5d8de9321f3d30f523915a761916dc4c73249d43ede70ff322032eca7dd7f973a36d99fe8c8df22e9e46930f7493dd08a316c798df8a96ec29daff35bdd3374f13b4b01f24697cec2c92bd4675f8543acfc3048d3e914ffec9ec097fc1946bb70b7d94498c06f7ab4ababfcf26270c5769bdd3bcd6062f8e102cf2dd430d91ce09e907d623ab3acc3fbccac35dc371d7d56248baaec741abee4275e016d9738b99272ec4f4f9b4b155f50