test-omero-1.vbc.ac.at

- Vienna BioCenter – Wissenschaftliche Standortgemeinschaft -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0e:ed:cd:d1:ec:26:9e:a3:37:e2:42:af:7c:15:dc:fb was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vienna BioCenter – Wissenschaftliche Standortgemeinschaft

Organization: Vienna BioCenter – Wissenschaftliche Standortgemeinschaft
Locality: Vienna
Country: AT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ed:cd:d1:ec:26:9e:a3:37:e2:42:af:7c:15:dc:fb
Serial Number (int): 19843940822201441086031716595728243963
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 81:7c:0f:90:da:4e:ad:c2:3f:d3:9b:9d:d7:71:e9:da:5c:0a:3e:42
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 9f:f8:e4:04:91:4c:31:c8:5e:a0:4e:ab:da:5e:b2:57:42:d1:ca:84
Fingerprint (sha256): 27:0f:89:0a:d1:29:a9:8e:55:0c:5b:a6:dc:7d:81:93:c9:4d:06:98:a0:2a:8a:9a:bc:fd:96:e3:ca:c8:b0:1c

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate test-omero-1.vbc.ac.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-omero-1.vbc.ac.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-omero-1.vbc.ac.at
test.omero.vbc.ac.at

Other certificates including the domain name vbc.ac.at

(limited to 100 certificates)
cert-test-1.vbc.ac.at
test-jira-1.vbc.ac.at
test-1.vbc.ac.at
rds-host-3.vbc.ac.at
rds-host-1.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
clausen-wiki-1.vbc.ac.at
test-higlass-1.vbc.ac.at
vpn.vbc.ac.at
cert-test-1.vbc.ac.at
it-jenkins-1.vbc.ac.at
rds-host-2.vbc.ac.at
*.vbc-selapp-1.vbc.ac.at
test-1.vbc.ac.at
test-jira-1.vbc.ac.at
it-api-2.vbc.ac.at
cert-test-1.vbc.ac.at
test-1.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
test-1.vbc.ac.at
rds-gateway-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
cert-test-1.vbc.ac.at
laravel.test.vbc.ac.at
cert-test-1.vbc.ac.at
imp-cryosparc-1.vbc.ac.at
zimmer-wiki-1.vbc.ac.at
test-eos-fwep-1.vbc.ac.at
webhooks.vbc.ac.at
test-mediawiki-1.vbc.ac.at
cert-test-1.vbc.ac.at
rds-host-5.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
nordborg-arageno-1.vbc.ac.at
vbc-singularity-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
cert-test-1.vbc.ac.at
rds-host-3.vbc.ac.at
test-higlass-1.vbc.ac.at
test-run-1.vbc.ac.at
cert-test-1.vbc.ac.at
imp-cryosparc-live-1.vbc.ac.at
test-1.vbc.ac.at
cloud.clip.vbc.ac.at
test-eos-mgm-2.vbc.ac.at
test-omero-1.vbc.ac.at
rds-host-1.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
training.vbc.ac.at
test-mediawiki-1.vbc.ac.at
www.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
test-1.vbc.ac.at
test-omero-1.vbc.ac.at
test-jira-1.vbc.ac.at
training.vbc.ac.at
cloud.staging.clip.vbc.ac.at
it.vbc.ac.at
cert-test-1.vbc.ac.at
test-run-1.vbc.ac.at
test-omero-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
cert-test-1.vbc.ac.at
f5-lb.vbc.ac.at
cert-test-1.vbc.ac.at
test-higlass-1.vbc.ac.at
test-1.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
test-1.vbc.ac.at
imp-cryosparc-live-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
nordborg-aragwas-1.vbc.ac.at
publish.vbc.ac.at
training.vbc.ac.at
test-omero-1.vbc.ac.at
remoteapps.vbc.ac.at
cloud.dev.vbc.ac.at
ngs-seqmate-2.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
test-1.vbc.ac.at
tanaka-wiki-1.vbc.ac.at
test-1.vbc.ac.at
ucsc.vbc.ac.at
training.vbc.ac.at
gerlich-cellcognitionproject-1.vbc.ac.at
ud-vbc-1.vbc.ac.at
test-orgt-1.vbc.ac.at
test-1.vbc.ac.at
test-eos-mgm-3.vbc.ac.at
cert-test-1.vbc.ac.at
ngs-reserva-1.vbc.ac.at
training.vbc.ac.at

Certificate

The complete raw certificate details for test-omero-1.vbc.ac.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApXgY9OM4i4pqDMDYrBut
g6BW7npzjaiFMYpOsHtjDCXQp9d/vYK92mdnwwkfE4lmGW2nC3SXwrDa/G5ArliX
j5m4VJe5E9E7S2/TIzqDkSJUMXTcz8tNPJ+ubKYD15n46a8T9MJhqlM2O0jiaMNp
NCKKk5nhrY5Nz2wIFlCJFqEpMXdvvnfUGHIJk6Vd21Jygv6Yj63bYWWFyPvKs7iO
DHgbA/PTrO9zZb//u3kCbNL6I4/7eM9jCHbTfpUQdAx6nOWcoAX39wRwqG6saBJC
I1SDxd8ZYk88YPzMZPmD8NcwOnX1JadsKQxG4CBUtCEw7B7hxh89+GSdg493EndV
abq7HOWcMAsOo0akNU2Zp8Bpw4FND2bhOa1MJCWqJHwmod76Mh/R55DNlb5OEp4p
h/NMey06D1Pv9hcvTA1BpnpCwqeP9GSfx3JUQvOsRiD/R6UFeh8HDFP5Q0G20n/S
FzW0zk/x9dTPsMhSN61r709x8yhJCGCWSpt2UYhqqyBgm5KlEolVThDakp03iu7w
hkRpXghCdkBM89HiXHCu1Z2G7HsaQNDMHbH13/p8LQOFi9bxaKwwPYjHNGWq39rA
ycckW1oWyeDMT56WL3UpA4d+TWPNpGnbrMoj7KBatM5xMIC4uEC7OZ2T6DgqNP00
WKO7cNreBegmEds7m7P7s68CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19843940822201441086031716595728243963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vienna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vienna BioCenter – Wissenschaftliche Standortgemeinschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-omero-1.vbc.ac.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675055157938753082959261948787685432196291025369363576553258477876436548019926521813894291749340178054989627291371314996319157673340754817268371832646531876792174351491467089947278472492362270120585704673591355322052643165028081402366092250772397157002259246990066682006077481143700262154549535336893077898417866216570906197208522850412781051601343895967327169228580618344350757523417891108567216310002604086576538985788048455942786011105892955499797561556736870543878429803111094707006472479821529309430179809062689776656873060608261939475558181933447339741329527586840196722957499019272066098369511751708532791816879444379090277045966215595520583098584314180557479765780109066206403463224003635551545692199730623454865130753487976886273832701185238071255479941680738762407900041599178848509835843130034115661483203537217459025268205708041122416667235741399036089574975328597249582817772696979423738531597292763442572919778095807413716587363039972774097483399945146364593112416561176356718419791288440068009425970184384324744520252389768113328812416844987045302033039208991988630081153022978934329049589271728338387757760523732168791858503560023430218147340091011026508091997292629292993920016885172221565148225323735955876718818223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							817c0f90da4eadc23fd39b9dd771e9da5c0a3e42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-omero-1.vbc.ac.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.omero.vbc.ac.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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