al-ng043.xtr.deltares.nl

- Stichting Deltares -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 04:eb:d2:68:10:f6:15:25:6f:9b:84:ea:15:90:b6:53 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Deltares

Organization: Stichting Deltares
Organization unit: ICT
Locality: Delft
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:d2:68:10:f6:15:25:6f:9b:84:ea:15:90:b6:53
Serial Number (int): 6541369295890272087634592096725284435
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: db:76:c9:5a:4c:9d:ff:33:af:cd:45:73:3f:17:b9:01:e7:c0:ba:1e
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 12:50:f6:a4:7a:67:94:8e:20:4e:47:d0:a9:2a:39:74:0c:d2:41:46
Fingerprint (sha256): 22:1c:c7:cd:88:5a:93:1c:2a:d7:21:47:03:1f:ce:e9:30:35:19:7e:1e:71:6e:f0:c2:3a:0c:12:2e:53:8c:61

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate al-ng043.xtr.deltares.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for al-ng043.xtr.deltares.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

al-ng043.xtr.deltares.nl
www.al-ng043.xtr.deltares.nl

Other certificates including the domain name deltares.nl

(limited to 100 certificates)
repos.deltares.nl
al-ng027.xtr.deltares.nl
va-mac099.domain.deltares.nl
glowasis.deltares.nl
sip.deltares.nl
issuetracker.deltares.nl
al-ng018.xtr.deltares.nl
svn.oss.deltares.nl
facilities.xtr.deltares.nl
shop.deltares.nl
circle.deltares.nl
issuetracker.deltares.nl
vcenter5.xtr.deltares.nl
iraqwatercrisis-iom.deltares.nl
tl-ng010.xtr.deltares.nl
oss.deltares.nl
*.deltares.nl
waterloupe.deltares.nl
tl-ng023.xtr.deltares.nl
testbuild.deltares.nl
oss.deltares.nl
webmail.deltares.nl
agenda.deltares.nl
svn.oss.deltares.nl
mail.domain.deltares.nl
waterloupe.deltares.nl
onlinesoftware.deltares.nl
tl-tc028.xtr.deltares.nl
crucible.deltares.nl
careers.deltares.nl
workspace.deltares.nl
al-ng007.xtr.deltares.nl
workspace.deltares.nl
issuetracker.avi.deltares.nl
meren.webservices.deltares.nl
ftp.deltares.nl
gds.avi.deltares.nl
v-web002.avi.deltares.nl
tl-ng012.xtr.deltares.nl
tl-ng045.xtr.deltares.nl
tl-ng018.xtr.deltares.nl
softwaredagen.deltares.nl
v-web002.deltares.nl
ast-backend.avi.deltares.nl
aw-tc005.xtr.deltares.nl
publicwiki-tst.deltares.nl
mail.deltares.nl
v-web002.deltares.nl
build.deltares.nl
al-ng043.xtr.deltares.nl
circle.deltares.nl
opendap-matroos.deltares.nl
al-ng018.xtr.deltares.nl
modeldata-nhi-data.deltares.nl
shop.deltares.nl
www.riverlab.deltares.nl
globalmodelviewer.deltares.nl
dw-oc002.xtr.deltares.nl
oss.deltares.nl
tl-ng044.xtr.deltares.nl
covadem.deltares.nl
repos.deltares.nl
tl-ws005.xtr.deltares.nl
intranet.deltares.nl
tl-tc030.xtr.deltares.nl
intranet.deltares.nl
tl-ng029.xtr.deltares.nl
pl-036.xtr.deltares.nl
content.oss.deltares.nl
fewsfoentest.deltares.nl
al-ng009.xtr.deltares.nl
tl-tc029.xtr.deltares.nl
publicwiki.deltares.nl
sip.deltares.nl
build.deltares.nl
tl-ng017.xtr.deltares.nl
vt-mac099.domain.deltares.nl
al-ng009.xtr.deltares.nl
www.deltares.nl
zabbix.xtr.deltares.nl
spacewalk.xtr.deltares.nl
intranet.deltares.nl
touch.deltares.nl
www.deltares.nl
dl-ng009.xtr.deltares.nl
www.deltares.nl
glossis.webservices.deltares.nl
acceptatie-intranet.deltares.nl
tl-ng042.xtr.deltares.nl
publicwiki.deltares.nl
modeldata-nhi-data.deltares.nl
opendap.deltares.nl
uaewqps.deltares.nl
tl-ng032.xtr.deltares.nl
al-ng025.xtr.deltares.nl
repos.deltares.nl
al-ng005.xtr.deltares.nl
aw-tc003.xtr.deltares.nl
uaewqps.deltares.nl
accounts.deltares.nl

Certificate

The complete raw certificate details for al-ng043.xtr.deltares.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIQBOvSaBD2FSVvm4TqFZC2UzANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xOTA5MTMwMDAwMDBaFw0yMTA5MTcxMjAwMDBaMGsxCzAJBgNVBAYT
Ak5MMQ4wDAYDVQQHEwVEZWxmdDEbMBkGA1UEChMSU3RpY2h0aW5nIERlbHRhcmVz
MQwwCgYDVQQLEwNJQ1QxITAfBgNVBAMTGGFsLW5nMDQzLnh0ci5kZWx0YXJlcy5u
bDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPKYVD780dWo6q1MfA1T
AkpHqGZ0tjlxHYB4wzC5PTjSdUX/ZvxU1YLhxF4n+RKh2m6WHthV2UgqsKwM4HG7
OxIsG0llbjnP2jJMfbOPpG/AXB0YnPIHVQXwpWsX/oOZhissMmCOE6qedCdXRRQz
Etakca5NFPg5lig37jcGmufrV0smZvTdtz6H7fZnUVYhUJgq2Q3yB3m0lFYu4BXj
6F2pri8465oMDlM2a90A7EmPOpXiDjmretpXhpFaaFkNWympDsI2D/UoqeJRxN9k
JEkxcp7lO6i7nxWITgFV/v2nfHS64Hrzh+QaKqAo9zCqni00NyYVOBHbaPFXDlh6
YB0CAwEAAaOCAgQwggIAMB8GA1UdIwQYMBaAFGf9iCAUJ5jHCdIlGbvpURFjdVBi
MB0GA1UdDgQWBBTbdslaTJ3/M6/NRXM/F7kB58C6HjBBBgNVHREEOjA4ghhhbC1u
ZzA0My54dHIuZGVsdGFyZXMubmyCHHd3dy5hbC1uZzA0My54dHIuZGVsdGFyZXMu
bmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vVEVS
RU5BU1NMQ0EzLmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL1RF
UkVOQVNTTENBMy5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEF
BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwbgYI
KwYBBQUHAQEEYjBgMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j
b20wOAYIKwYBBQUHMAKGLGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9URVJF
TkFTU0xDQTMuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw
DQYJKoZIhvcNAQELBQADggEBAK+Q3V5FvAqz2P4EfzuChiJXM7sHRrj414ZGIL0x
z+DMTkYJ+T3/fHHWhIBDbuUTlVObEC3iT1Xq7xNScSf2kPDxmWLuMoHXmg1Qqaxy
leNWyT+5HjIw9QU4vpRv+SQ2cIkB//5f9iwpLiht9f/NqtY+JdZ+TH694R7vB7Rd
IIFRijXGLlUuYCJmmwqpLGOBgsoZgwljNT3IszsFGUyt8g+52jpCrHszLTsnTVQf
Of8eZBNquegu8/ToNtB0Zk58EQ1PsP0k3RBJy4dAnBKWV7XlMVJfsupGjKzM5K9W
7Pl2CV5dyUHyOXD8sS9YyfNefa3I9CLQYpxkqxRcT6idISU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8phUPvzR1ajqrUx8DVMC
SkeoZnS2OXEdgHjDMLk9ONJ1Rf9m/FTVguHEXif5EqHabpYe2FXZSCqwrAzgcbs7
EiwbSWVuOc/aMkx9s4+kb8BcHRic8gdVBfClaxf+g5mGKywyYI4Tqp50J1dFFDMS
1qRxrk0U+DmWKDfuNwaa5+tXSyZm9N23Poft9mdRViFQmCrZDfIHebSUVi7gFePo
XamuLzjrmgwOUzZr3QDsSY86leIOOat62leGkVpoWQ1bKakOwjYP9Sip4lHE32Qk
STFynuU7qLufFYhOAVX+/ad8dLrgevOH5BoqoCj3MKqeLTQ3JhU4Edto8VcOWHpg
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6541369295890272087634592096725284435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Deltares'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'al-ng043.xtr.deltares.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30624786073770869624179830870513223753489223580144038020491811051772356157039332039980229175180274436754911821976372485666802707224874711442788303029576123626306256111403023628506981298062471243646367857442005016495759860590285913902884498428136271637857758351056407806781486768478586913802927911862188706551648873707293796737930117729831780762528702338181100760998756455494773823545266036288901506641689012779857430004957078745011367745325114580031889134586780076163479450712912210464717288969419023561391237206197549276022486999800922859932246412382343125228949782665482332754548712424032094059962842737664675438621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db76c95a4c9dff33afcd45733f17b901e7c0ba1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'al-ng043.xtr.deltares.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.al-ng043.xtr.deltares.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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