jthgit1.hj.se
- Jönköping University -
Issued by TERENA SSL High Assurance CA 3
About this certificate
This digital certificate with serial number 04:e7:ec:7c:46:73:15:78:7f:36:24:b0:d9:86:3e:6d was issued on by TERENA.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Jönköping University
Company registration number:
Government Entity
Organization: Jönköping University
Organization: Jönköping University
Locality:
Jönköping
Country: SE
Country: SE
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e7:ec:7c:46:73:15:78:7f:36:24:b0:d9:86:3e:6dSerial Number (int): 6521129052222900786025506750987648621
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 13:52:5f:e7:7e:cc:8c:91:ef:16:bc:31:50:a9:db:03:a5:4b:61:e8
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9
Fingerprint (sha1): 0e:0c:9a:eb:a7:cb:10:13:19:e6:75:6e:7b:38:f4:68:16:67:e3:7b
Fingerprint (sha256): 19:d1:e3:0f:0e:66:b8:09:c6:fb:69:1c:6b:cd:f4:4f:f6:82:1a:f7:98:20:44:ca:d2:51:f3:c0:d7:17:12:84
Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl
Check the revocation status for certificate jthgit1.hj.se
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jthgit1.hj.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jthgit1.hj.se
www.jthgit1.hj.se
www.jthgit1.hj.se
Other certificates including the domain name hj.se
(limited to 100 certificates)
mediationpool.ad.hj.se
jusv1.hj.se
jumobile.ju.se
adfs.ju.se
vfu.hj.se
manage.ju.se
op5.hj.se
op5test.hj.se
prime.ju.se
projweb1.hj.se
idp.hj.se
projweb.hj.se
test.play.hj.se
pingpong.ju.se
play.hj.se
alumni.hj.se
jth-booked.hj.se
jureshareszcsek.ju.se
gw-prim.hj.se
juoffwebapp01.ad.hj.se
academ-dev.ju.se
alumni.ju.se
devsrvl2.ju.se
ladok.ju.se
projweb.hj.se
ieweb2.hj.se
*.bibl.proxy.hj.se
filr.hj.se
gw-hspers1.hj.se
kas.hj.se
ad.hj.se
kronox.hj.se
happy.ju.se
accommodation.hj.se
windreamsrv.win.hj.se
ifolder3.hj.se
kas.win.hj.se
cirrato.hj.se
yh.hj.se
webutv.hj.se
www.ju.se
yh.ju.se
hofab.se
projweb.hj.se
kronox.hj.se
jthop1.hj.se
zcentral.ju.se
gw-smtp2.hj.se
logsrv.hj.se
caneaone.win.hj.se
op5.hj.se
jthgit1.hj.se
kas.win.hj.se
prime.ju.se
iesv5.hj.se
jthop1.hj.se
msv1.hj.se
lpw.hj.se
mutv2.hj.se
jth-svn.hj.se
jth-booked.hj.se
payman.hj.se
www.hlk.hj.se
account.win.hj.se
agrprod-web.win.hj.se
websrv.win.hj.se
bliss.hj.se
gitlab.hj.se
dh.hj.se
kas.win.hj.se
julius.hj.se
www.ju.se
projweb.hj.se
kronox.hj.se
julia.library.ju.se
cwlms.hj.se
nm.hj.se
styr.hj.se
lscr3.hj.se
hayley.hj.se
pingpong.hj.se
blissweb.win.hj.se
ju.se
dev.play.hj.se
account.win.hj.se
shibb1.hj.se
mdev1.hj.se
mutv1.hj.se
idp.hj.se
dev.play.hj.se
pingpong.ju.se
academ-dev.ju.se
api.ju.se
ieweb1.hj.se
jthop1.hj.se
gw-jthpers1.hj.se
flex.hj.se
iesv6.hj.se
jureshare.ju.se
gw-web.hj.se
jusv1.hj.se
jumobile.ju.se
adfs.ju.se
vfu.hj.se
manage.ju.se
op5.hj.se
op5test.hj.se
prime.ju.se
projweb1.hj.se
idp.hj.se
projweb.hj.se
test.play.hj.se
pingpong.ju.se
play.hj.se
alumni.hj.se
jth-booked.hj.se
jureshareszcsek.ju.se
gw-prim.hj.se
juoffwebapp01.ad.hj.se
academ-dev.ju.se
alumni.ju.se
devsrvl2.ju.se
ladok.ju.se
projweb.hj.se
ieweb2.hj.se
*.bibl.proxy.hj.se
filr.hj.se
gw-hspers1.hj.se
kas.hj.se
ad.hj.se
kronox.hj.se
happy.ju.se
accommodation.hj.se
windreamsrv.win.hj.se
ifolder3.hj.se
kas.win.hj.se
cirrato.hj.se
yh.hj.se
webutv.hj.se
www.ju.se
yh.ju.se
hofab.se
projweb.hj.se
kronox.hj.se
jthop1.hj.se
zcentral.ju.se
gw-smtp2.hj.se
logsrv.hj.se
caneaone.win.hj.se
op5.hj.se
jthgit1.hj.se
kas.win.hj.se
prime.ju.se
iesv5.hj.se
jthop1.hj.se
msv1.hj.se
lpw.hj.se
mutv2.hj.se
jth-svn.hj.se
jth-booked.hj.se
payman.hj.se
www.hlk.hj.se
account.win.hj.se
agrprod-web.win.hj.se
websrv.win.hj.se
bliss.hj.se
gitlab.hj.se
dh.hj.se
kas.win.hj.se
julius.hj.se
www.ju.se
projweb.hj.se
kronox.hj.se
julia.library.ju.se
cwlms.hj.se
nm.hj.se
styr.hj.se
lscr3.hj.se
hayley.hj.se
pingpong.hj.se
blissweb.win.hj.se
ju.se
dev.play.hj.se
account.win.hj.se
shibb1.hj.se
mdev1.hj.se
mutv1.hj.se
idp.hj.se
dev.play.hj.se
pingpong.ju.se
academ-dev.ju.se
api.ju.se
ieweb1.hj.se
jthop1.hj.se
gw-jthpers1.hj.se
flex.hj.se
iesv6.hj.se
jureshare.ju.se
gw-web.hj.se
Certificate
The complete raw certificate details for jthgit1.hj.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIQBOfsfEZzFXh/NiSw2YY+bTANBgkqhkiG9w0BAQsFADBz MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExJzAlBgNVBAMTHlRFUkVOQSBTU0wg SGlnaCBBc3N1cmFuY2UgQ0EgMzAeFw0yMDAxMDcwMDAwMDBaFw0yMjAxMTExMjAw MDBaMIGpMRowGAYDVQQPDBFHb3Zlcm5tZW50IEVudGl0eTETMBEGCysGAQQBgjc8 AgEDEwJTRTEaMBgGA1UEBRMRR292ZXJubWVudCBFbnRpdHkxCzAJBgNVBAYTAlNF MRQwEgYDVQQHDAtKw7Zua8O2cGluZzEfMB0GA1UECgwWSsO2bmvDtnBpbmcgVW5p dmVyc2l0eTEWMBQGA1UEAxMNanRoZ2l0MS5oai5zZTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALWn3oNvGpTDyCiY82oPERwiM3bLbgLaFldMKyKXOcml rsld48wmGXf88AtehbCyun3uCQcvZM99geJSvcfr4RTv2CrCbAhRemx1pdJ98SzR WuVArpbWhlOn94CTwfhJbdzK9WpZvizLo0uI9Mzl5wK8H8fSJizzx5PLdoZ+difT IcHQzrPu5M515CWWngEJj1jgLhLmBssY8A5forBAjOBm3zPv75uEzQVRJTF9ECYz nFVoox7XadpEDEI3dYjj/GGBoIb7uzTQRoKzQyR+gWUllkIQiBzRcblazF9ZixD6 q5UYtFZfVJnqPb+SMbIL5K9XppZWlck8JHfA34i1/ZECAwEAAaOCA4IwggN+MB8G A1UdIwQYMBaAFMK4hdfhuRO90Ui8/V7cfZBCeoqpMB0GA1UdDgQWBBQTUl/nfsyM ke8WvDFQqdsDpUth6DArBgNVHREEJDAigg1qdGhnaXQxLmhqLnNlghF3d3cuanRo Z2l0MS5oai5zZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMIGFBgNVHR8EfjB8MDygOqA4hjZodHRwOi8vY3JsMy5kaWdpY2Vy dC5jb20vVEVSRU5BU1NMSGlnaEFzc3VyYW5jZUNBMy5jcmwwPKA6oDiGNmh0dHA6 Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xIaWdoQXNzdXJhbmNlQ0EzLmNy bDBLBgNVHSAERDBCMDcGCWCGSAGG/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAcGBWeBDAEBMHsGCCsGAQUFBwEBBG8wbTAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEUGCCsGAQUFBzAC hjlodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVSRU5BU1NMSGlnaEFzc3Vy YW5jZUNBMy5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIB agFoAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFvgABwYQAA BAMARjBEAiB+Kz7D1i2cUbvtMnSa5uzsS1cuypWAkKLpUKlsHhG+tAIgcF9IFGIb g1mivUWSD2iegHMusJjGbC/OH4cI/q61sNcAdwBWFAaaL9fC7NP14b1Esj7HRna5 vJkRXMDvlJhV1onQ3QAAAW+AAHFUAAAEAwBIMEYCIQDXHYOwmsMt0hTGJ4go7MXG zUroXdR4S6gp/H7xk4Ui8AIhAP0+Sd7ZaZ5LPIPFBbQtk9aeABxyhcA6OepqivBt swE7AHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFvgABwqQAA BAMARzBFAiBRTaOGSZ+b5UySMzGDOFq1U2ALelGuSEmr9hoiJQNa7gIhAIJ2ZcRu f8xPaBKU4xck9rohHIQ6aCwcomjEP9O4XNyFMA0GCSqGSIb3DQEBCwUAA4IBAQAj UbCvuVVv0ba+7vgEo7hkQIuGzCRTJ2vqUCuY1YL50T1rIJBulfBRRxwV0rjUMNeO DidzNMJYP9IjKQ74qonbyxU5pdvQxpHyG4Z8hfqBP0uQGXkAWBLcKIQ9vNfFIpV3 49lRpKyd+mZMsuBlsTlsDSyyeBQJgOFMgWXy8U9wg6aObzPwGkK2FopbeW/fjcvl qWcfWSwkK+wVm17b7zI0VAZa1TR0rtW02rmZ4T8PS97famiuXxwy2/H3eOx41YNq aENXaWXOjxhsgBZfcoGMYMYCLeZTWVwzSEvfwf6ngXK+zGRZw+LzChVSDTymqm3R dU6SboTat1NpLb+C/Jby -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtafeg28alMPIKJjzag8R HCIzdstuAtoWV0wrIpc5yaWuyV3jzCYZd/zwC16FsLK6fe4JBy9kz32B4lK9x+vh FO/YKsJsCFF6bHWl0n3xLNFa5UCultaGU6f3gJPB+Elt3Mr1alm+LMujS4j0zOXn Arwfx9ImLPPHk8t2hn52J9MhwdDOs+7kznXkJZaeAQmPWOAuEuYGyxjwDl+isECM 4GbfM+/vm4TNBVElMX0QJjOcVWijHtdp2kQMQjd1iOP8YYGghvu7NNBGgrNDJH6B ZSWWQhCIHNFxuVrMX1mLEPqrlRi0Vl9Umeo9v5Ixsgvkr1emllaVyTwkd8DfiLX9 kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6521129052222900786025506750987648621 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jönköping' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jönköping University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jthgit1.hj.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22931912583166487282628272996064978045422115759068597531996123397475863522627196529156953769008952102835888378840300989233064459564908887033123978001233490642119965430865643881280547619057372159653558809782537415566333383079767710005646856331713478355492328770601003153008931243082290073546083223261275405790660819414614973561330246421919537870755087518798161412851759257336312830126714256719489191972523964520849019137464204672358990583134468325532791243017673188338156103834680708027141682989683409832294147946989608439542807712794379019139296655161819588161109634019607470016814317463945518289395900289707203231121 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 13525fe77ecc8c91ef16bc3150a9db03a54b61e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jthgit1.hj.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jthgit1.hj.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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