rvv-cce.be-Jbox-INT.bosa.be

- FOD BOSA -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 06:2b:8a:b3:91:20:fe:56:3f:57:73:03:b2:22:8a:e7 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FOD BOSA

Organization: FOD BOSA
Organization unit: 0308356862
State / Province: Brussels
Country: BE

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 06:2b:8a:b3:91:20:fe:56:3f:57:73:03:b2:22:8a:e7
Serial Number (int): 8201449938908099931678173203546671847
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 14:84:75:82:67:55:58:48:0e:5b:09:80:4d:20:27:01:42:45:c7:f1
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): b0:27:2e:07:09:6c:a2:f5:6b:c5:44:0f:bc:60:a9:85:53:71:73:3b
Fingerprint (sha256): 1b:36:20:7f:3c:0f:0c:eb:56:a3:12:26:af:21:ce:74:95:ff:75:f4:4b:96:32:20:78:de:fa:ce:7c:3b:68:94

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate rvv-cce.be-Jbox-INT.bosa.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rvv-cce.be-Jbox-INT.bosa.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rvv-cce.be-Jbox-INT.bosa.be
www.rvv-cce.be-Jbox-INT.bosa.be

Other certificates including the domain name bosa.be

(limited to 100 certificates)
herentals-ebirth-prd.bosa.be
pelt-ebirth-prod.bosa.be
mechelen-ebirth-prd.bosa.be
mol-ebirth-int.bosa.be
vilvoorde-ebirth-prd.bosa.be
MOD-Application-DIV-ACC.bosa.be
Infrabel-Peppol-DEV.bosa.be
DIGIPOLIS-CJCS-Test.bosa.be
SopraSteriaDamienButaye-test.bosa.be
Aalst-eBirth-PRD.bosa.be
opendata.bosa.be
FSB-PALDB-INT.bosa.be
Capachvw-mercurius-acc.bosa.be
gs.pga.test.bosa.be
dt.bosa.be
opendata.bosa.be
NoAccess-test.bosa.be
fsf-git-poc.bosa.be
DUMAYMIOR.bosa.be
soa-INT-FSB.bosa.be
dtservices.bosa.be
RDCihanKucukkececi-test.bosa.be
ieper-ebirth-prod.bosa.be
fednot-asf-prod.bosa.be
FODMOB-ESB-PRD.bosa.be
bosa.be
tienen-ebirth-prd.bosa.be
RDOlivierHouyoux-test.bosa.be
RDMajaBiocic-test.bosa.be
FODMOB-ESB-DEV-TEST.bosa.be
asse-ebirth-int.bosa.be
bornem-ebirt-prod.bosa.be
pelt-ebirth-int.bosa.be
CFWB.bosa.be
Aginco.bosa.be
auderghem-ebirth-prod.bosa.be
Leuven-eBirth-PRD.bosa.be
ebirth-medical-form.bosa.be
accep-dabs.bosa.be
Oostende-eBirth-PRD.bosa.be
rvv-cce.be-Jbox-INT.bosa.be
BIPT-DIGITAALKANTOOR-PRD.bosa.be
Zottegem-eBirth-PRD.bosa.be
NMBS-SNCB-Mercurius-INT.bosa.be
SPFEconomie-ERIS-TST.bosa.be
bosa.be
Zenito-test.bosa.be
fednot-edepot-prod.bosa.be
cirb-fidus-prod.bosa.be
diplobel.masterdata.test.bosa.be
eBirth-Mouscron.bosa.be
rolesattrsvc-client.fodfin.masterSO-test.bosa.be
dtservices.bosa.be
fsf-registry-poc.bosa.be
riziv-mercurius-prd.bosa.be
ebirth-Liege.bosa.be
Securitas-Aline-Proxy-Test.bosa.be
Roeselare-eBirth-PRD.bosa.be
cirb-fidus-int.bosa.be
fednot-edepot-test.bosa.be
Formalis.Aurealis.DEV.bosa.be
SteriaAntonioSellari-test.bosa.be
overpelt-ebirth-prod.bosa.be
opendata.bosa.be
VVVL-3dB-test.bosa.be
FANC.CIS.UAT.bosa.be
fednot-vea-prod.bosa.be
bornem-ebirth-prd.bosa.be
Commune-de-Libramont-Chevigny.bosa.be
dtservices.bosa.be
FEDERALSERVICEBUSINT.bosa.be
gs.pga.pr.bosa.be
ebirth-test.bosa.be
BosaMarcBruyland-test.bosa.be
dt.bosa.be
ETNIC-DEMAT-FACTURES-PRD.bosa.be
gs.pga.int.bosa.be
DIGIPOLIS-CJCS-Prod.bosa.be
PGAIWFPROD.bosa.be
dtservices.bosa.be
Deinze-eBirth-PRD.bosa.be
dtservices.bosa.be
PalMediator-TA.bosa.be
ecampus.bosa.belgium.be
mol-ebirth-prod.bosa.be
Kortrijk-eBirth-prod.bosa.be
verisure-aline-dev.bosa.be
asse-ebirth-prod.bosa.be
fednot-fent-prod.bosa.be
MercuriusServiceSimulatorPROD.bosa.be
FWB-SAPE.bosa.be
JustitieRR-test.PRD.bosa.be
Lokeren-eBirth-PRD.bosa.be
xerius-connectorskbo-test.bosa.be
FANC.CIS.PRD.bosa.be
bosa.be
eBirth-Etterbeek.bosa.be
halle-ebirth-prd.bosa.be
pelt-ebirth-prod.bosa.be
dt.bosa.be

Certificate

The complete raw certificate details for rvv-cce.be-Jbox-INT.bosa.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5hnSiA752rLopuraKxxb
c02N7aEJfFW/5EYkGgVTR7OZb/hYyjz29jsw0Ae7W1U9Ujm71xsyr6T3Xj1zurn1
lyNoUKPQyTt2Al9ENtpmX3jFEekCUuMdokn5o/FMbYb9x8ILkf2ihl73f00zabP1
jYlBjNAfl5yZ3KGO8LLgS+j7sCf8w52QuHoDNQ+hGKUApYYkS90gu7oP8Qv4sqDf
dZ/TBVNDumLqgqx6yXT10JtNWY/cJHAdbZ7GykC56Jiu7hV+gC2h7xd9hPO06e/V
PC8bRFcgTypmpMyyvAm6XUWgO9jOFH/s/a8WtwsDTkJm4PSn3UMhJJKfRfe1lovH
WZKWM4E5YAxKowdMdil9On8P+rlMZ6Oq5RatM/3c3Ykov15nFUKbioMI32OKIw8x
RSC/LrQbD/6BZp3Zq7VmlSgVn4BIM3LB6eGruRFd3MKJ705BUwm0m3ZBekDOYSlX
M9e9jMD+R4Ra1FcSvzUT3OfslSNOET/y+B8bSpWTyukxchw93ckctui1X0X9gRJn
fopuCplYxLQKY0AfZuogES2X/Qq19QHGrvYu0WZ03dhfcxOIhxaBxUoaxKQ6p9T8
uKAIA/yp5sfCaTLEF4swiKnmHHGaV5RSJA/o+egRZ/imzspPYTWZBYC+R16FYhHD
zTsRn9p7NY7jnf+Eco/fucECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8201449938908099931678173203546671847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FOD BOSA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0308356862'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rvv-cce.be-Jbox-INT.bosa.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 938729644060351650509564686274653665628967580409285632263389854761656048516169829794113802056413098270794021537029150975571283130081922027583918763007944541899891965869956689658224568326754224325064769983731900290465765740339933571335506804415036284727820696873745049142870942432066736587883685805249233244061636467564747186184885613520308420398639419381300861963905060489488417188991171070531045055903425966074885685158528715064057349298540097349553519707802094655386708424334418498755360241524499272088452478939718439215226391546813351023163078110927722766084794928748591719742222248264410042916175841458089305753775146901415788018104677785542308405540539632060910412694290081802867732137747721483998509295312708925330867623050517072826369422391953841193376772583725224284441409087884598770568811612760643599716004291937330227390551015188391636834876492643226564897339562147751071891006216789538524851857854024634049728233854413006635034576835759525059945963202561538042026609983916160126485327005971145196097636747492472578352742347595368071825805331297896077674225357232878244106748057302309745888482966980833178244952846136949274711466785568385704087125579648446102272231330455997209555830177342014137132238492016764104386525633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14847582675558480e5b09804d2027014245c7f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvv-cce.be-Jbox-INT.bosa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rvv-cce.be-Jbox-INT.bosa.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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