pallast2.stmk.gv.at

- Amt der Steiermaerkischen Landesregierung -

Issued by TERENA SSL High Assurance CA 3

About this certificate

This digital certificate with serial number 06:73:7e:5a:d1:5f:09:4a:eb:55:af:0f:87:e9:33:82 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Amt der Steiermaerkischen Landesregierung

Company registration number: Government Entity
Organization: Amt der Steiermaerkischen Landesregierung
Organization unit: ABT01
Locality: Graz
Country: AT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 06:73:7e:5a:d1:5f:09:4a:eb:55:af:0f:87:e9:33:82
Serial Number (int): 8575044892382945697807219081723065218
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e4:9f:36:ce:a4:be:95:f1:61:00:6f:7f:e5:ef:78:81:4e:04:be:35
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9

Fingerprint (sha1): bd:fe:4d:a5:93:54:d8:fe:66:ec:21:e2:9c:76:a1:06:b9:ff:ee:bd
Fingerprint (sha256): 26:10:a2:1e:73:fa:f3:b8:13:af:96:c6:24:23:51:1e:6a:6c:1e:00:6b:31:47:29:50:7f:37:32:50:04:20:45

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl

Check the revocation status for certificate pallast2.stmk.gv.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pallast2.stmk.gv.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pallast2.stmk.gv.at

Other certificates including the domain name stmk.gv.at

(limited to 100 certificates)
wis.stmk.gv.at
ctxshare.stmk.gv.at
egovtest.stmk.gv.at
sterztest.stmk.gv.at
pallast2.stmk.gv.at
citrix-ag.stmk.gv.at
citrix-test.stmk.gv.at
pallast2.stmk.gv.at
moatest.stmk.gv.at
moa.stmk.gv.at
pi-test.stmk.gv.at
xmtest.stmk.gv.at
xmtest.stmk.gv.at
moatest.stmk.gv.at
sterz3test.stmk.gv.at
datenschutz.stmk.gv.at
pallast2.stmk.gv.at
egov.stmk.gv.at
sterz3test.stmk.gv.at
xmtest.stmk.gv.at
wis.stmk.gv.at
ref-test.stmk.gv.at
moatest.stmk.gv.at
pallasttest.stmk.gv.at
egov.stmk.gv.at
sanis.stmk.gv.at
egov.stmk.gv.at
digitaltest.stmk.gv.at
ref-test.stmk.gv.at
autodiscover.stmk.gv.at
wis.stmk.gv.at
citrix-ag.stmk.gv.at
lyncrp.stmk.gv.at
sanis.stmk.gv.at
gis.stmk.gv.at
wis.stmk.gv.at
rsa.stmk.gv.at
sterztest.stmk.gv.at
ngmxm.stmk.gv.at
pvptest.stmk.gv.at
citrix-ag.stmk.gv.at
sanis.stmk.gv.at
pallast2.stmk.gv.at
sterztest.stmk.gv.at
modestest.stmk.gv.at
wis.stmk.gv.at
sanis.stmk.gv.at
sterz3.stmk.gv.at
adfs.stmk.gv.at
pallast-schulung.stmk.gv.at
nstest.stmk.gv.at
sterztest.stmk.gv.at
citrix-ag.stmk.gv.at
egov.stmk.gv.at
mail2.stmk.gv.at
datenschutz.stmk.gv.at
sterz3.stmk.gv.at
citrix-test.stmk.gv.at
jobs.stmk.gv.at
datenschutz.stmk.gv.at
sterz3.stmk.gv.at
egovtest.stmk.gv.at
samlawptest.stmk.gv.at
ctxmxm-test.stmk.gv.at
ctxsharetest.stmk.gv.at
nstest.stmk.gv.at
vpn-ns.stmk.gv.at
sterztest.stmk.gv.at
as.stmk.gv.at
lyncrp.stmk.gv.at
moatest.stmk.gv.at
sanis.stmk.gv.at
test-app.stmk.gv.at
lib.stmk.gv.at
ngmodestest.stmk.gv.at
wis.stmk.gv.at
bergapp.stmk.gv.at
webmail.stmk.gv.at
sterztest.stmk.gv.at
modestest.stmk.gv.at
literatur.stmk.gv.at
literatur.stmk.gv.at
pallast.stmk.gv.at
jobs.stmk.gv.at
moa.stmk.gv.at
rsa.stmk.gv.at
moa.stmk.gv.at
gis.stmk.gv.at
egovtest.stmk.gv.at
auth.stmk.gv.at
lyncrp.stmk.gv.at
xm.stmk.gv.at
nstest.stmk.gv.at
service.stmk.gv.at
pallast2.stmk.gv.at
egovtest.stmk.gv.at
pvp.stmk.gv.at
as.stmk.gv.at
xm.stmk.gv.at
pi.stmk.gv.at

Certificate

The complete raw certificate details for pallast2.stmk.gv.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UicWwMZTh5pxqQEmk6Y
vKVhlucEK4N3DkjC5XghGFxbML/3lxYBHNHKOSg2fMCDcHBBsUVkTfzTrNJAqTCh
MN8rq6ERIMi70aWvnxFdYPWb2TVgucgQiKBFVcBIEEjrpD1RMohYWjXX88PVFZtC
Hpxds2y81rt2OdwHGDyWjzLCh2wQyHKuHKff1yHSJ3Rs45SdNNzoR+l8ezJW3/vN
ITO+DI/3mOQGeT+XYV4PMu69bVepcPVsJNFVTYkuZBqg2YLBk5jJg68fASx2qQ/C
u82AY5fue/v7k6M8cwU8w1qcTPIO0HOAmMwMDD1QeXnjgzonOq3sJ8qEPPXrz9ph
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8575044892382945697807219081723065218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Graz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amt der Steiermaerkischen Landesregierung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ABT01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pallast2.stmk.gv.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27934471099593235045367316255953305863247540392258538298514266945839578809439102790904535491026766736195227534826006728318667183832055743779649719816310497783725693534340153481048185560701090652647313184225130432135863562381458017787787048018984264602878571678186294906162793855717516674736336648534837630310481496853674050433656295238426079918336728476499712332546138665642187366783824578869159219990591559695514262887576379829295250135534392452143397055991393945289338827066202510454626253072286048716586537254714704012611129015280284022086139840686377344983950434382660075999244267263426571441600410135193406038283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e49f36cea4be95f161006f7fe5ef78814e04be35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pallast2.stmk.gv.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							01e2007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015ea55e312400000403004630440220527521d77a92b6cc3455dd4df45ddfaa98eee859e1a31cbc88112ffdee84416602200392d1d5637dd6b94bebca5d2cd16cc137ad91691f0c998b43853a084788159b0077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015ea55e31de000004030048304602210091f44a2a602458c8625e43654caef20d598281ef17f58b5389c76a662cc4afc70221009733db15100b26b0e4b84822c36ee6756e5e924a7c93c752ef89e2dba57c2eca007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015ea55e341e0000040300483046022100a4cf0ce2a41acb4558fe9a9e81b33a6a25e72fbbdb039923e6e454fb244ab32f022100deda0ea273bc90a74dbe2479071b92e9971e2b0889b94dcaff9cd3800cde7c0e007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015ea55e31d40000040300483046022100e044594ca764ac5cd836d7d9a912fa668533af4b842bb2b8f092428344e314a102210082b8c2e6070d23fb804a3fa5caecbb247e38c312c802c7e8bbb181dfe9a0798c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e472816a7364254cd3f80d1d1616f4e709a6a02fd7be3a6b20822f794b637b6d1bdd33f1780941481496d3a8b808cc8e89442b474f090df9d58d09b8a9041df712e2b676ac414b8c934e8bf2fe25f5100dea380de41cc848ebfd4ae35ea1a33220ac719091a9e9d3b68be9aba2a6d67c1e5f09480229068cc1bc7c5594cc7ddd1ee39912513d0ec6d03e9ec4dc9dd5d5a54938971a0708a82969a53d6a9477dc093f0df0d8da2e0d26d3eb2ba146c25cb2875db95409239fbedc6d2c4a186fbc8e9b86513676fe2b40bd33c4bf372701ed5c3e1f206a7a2e25e34c57d0f2ec1981ba19aabb94f4dd70608297364bc073500c22cec30a430374f5d57a91b6fb6