webuntis.onderwijsgroeptilburg.nl

- Onderwijsgroep Tilburg -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 03:83:13:af:00:63:02:64:62:d7:91:ac:f1:49:98:cb was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Onderwijsgroep Tilburg

Organization: Onderwijsgroep Tilburg
Organization unit: ICT-Diensten
Locality: Tilburg
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:13:af:00:63:02:64:62:d7:91:ac:f1:49:98:cb
Serial Number (int): 4668274106653414368717592974154373323
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2f:24:03:74:50:b6:63:7f:17:c5:c7:a5:24:c4:4c:ee:a7:1f:00:f7
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 6f:ba:55:c8:b1:7e:f6:e0:00:07:ce:7a:16:19:70:24:ac:bd:ac:98
Fingerprint (sha256): 2a:85:89:e6:7f:f2:87:ac:97:79:93:5f:ee:c1:24:a1:42:11:67:a2:6e:f6:45:0e:14:32:94:80:5f:f7:15:02

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate webuntis.onderwijsgroeptilburg.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webuntis.onderwijsgroeptilburg.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webuntis.onderwijsgroeptilburg.nl

Other certificates including the domain name onderwijsgroeptilburg.nl

(limited to 100 certificates)
mediawiki.onderwijsgroeptilburg.nl
verzuimloket.onderwijsgroeptilburg.nl
topdesk.onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
onedrive.onderwijsgroeptilburg.nl
centreon01.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
onedrive.onderwijsgroeptilburg.nl
pcoip-mc2.onderwijsgroeptilburg.nl
myprint.onderwijsgroeptilburg.nl
qlikview.onderwijsgroeptilburg.nl
satosa.onderwijsgroeptilburg.nl
*.onderwijsgroeptilburg.nl
topdesk-test.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
rsng.onderwijsgroeptilburg.nl
skypepool001.onderwijsgroeptilburg.nl
mijn.onderwijsgroeptilburg.nl
salto.onderwijsgroeptilburg.nl
myprint.onderwijsgroeptilburg.nl
rswp01.onderwijsgroeptilburg.nl
id.onderwijsgroeptilburg.nl
webmail.onderwijsgroeptilburg.nl
iportal.onderwijsgroeptilburg.nl
webmail.onderwijsgroeptilburg.nl
pcoip-mc2.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
iportal.onderwijsgroeptilburg.nl
ondertekenen.onderwijsgroeptilburg.nl
17-21.onderwijsgroeptilburg.nl
skypeedge01.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
rsng.onderwijsgroeptilburg.nl
testsite.onderwijsgroeptilburg.nl
ondertekenen.onderwijsgroeptilburg.nl
salto.onderwijsgroeptilburg.nl
www.onderwijsgroeptilburg.nl
ondertekenen.onderwijsgroeptilburg.nl
sharepoint.onderwijsgroeptilburg.nl
prime01.onderwijsgroeptilburg.nl
ict.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
iportal.onderwijsgroeptilburg.nl
prime01.onderwijsgroeptilburg.nl
digitaalarchiefproductie.onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
satosa.onderwijsgroeptilburg.nl
testsite.onderwijsgroeptilburg.nl
onedrive.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
sip.onderwijsgroeptilburg.nl
skypepool001.onderwijsgroeptilburg.nl
qlikview.onderwijsgroeptilburg.nl
auth.onderwijsgroeptilburg.nl
sharepoint.onderwijsgroeptilburg.nl
topdesk.onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
ict.onderwijsgroeptilburg.nl
*.onderwijsgroeptilburg.nl
sharepoint.onderwijsgroeptilburg.nl
nagios.onderwijsgroeptilburg.nl
onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
sharepoint.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
myprint.onderwijsgroeptilburg.nl
webmail.onderwijsgroeptilburg.nl
digitaalarchiefproductie.onderwijsgroeptilburg.nl
17-21.onderwijsgroeptilburg.nl
qlikview.onderwijsgroeptilburg.nl
17-21.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
rsng-test.onderwijsgroeptilburg.nl
skype-a365-01.onderwijsgroeptilburg.nl
idtst.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
skypepool01.onderwijsgroeptilburg.nl
rsng-test.onderwijsgroeptilburg.nl
onderwijsgroeptilburg.nl
idtst.onderwijsgroeptilburg.nl
ondertekenentst.onderwijsgroeptilburg.nl
id.onderwijsgroeptilburg.nl
onderwijsgroeptilburg.nl
mavim.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
sip.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
ondertekenen.onderwijsgroeptilburg.nl
satosa.onderwijsgroeptilburg.nl
mediawiki.onderwijsgroeptilburg.nl
skype-a365-01.onderwijsgroeptilburg.nl
ondertekenentst.onderwijsgroeptilburg.nl

Certificate

The complete raw certificate details for webuntis.onderwijsgroeptilburg.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIQA4MTrwBjAmRi15Gs8UmYyzANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xODAzMTQwMDAwMDBaFw0xOTA1MTQxMjAwMDBaMIGDMQswCQYDVQQG
EwJOTDEQMA4GA1UEBxMHVGlsYnVyZzEfMB0GA1UEChMWT25kZXJ3aWpzZ3JvZXAg
VGlsYnVyZzEVMBMGA1UECxMMSUNULURpZW5zdGVuMSowKAYDVQQDEyF3ZWJ1bnRp
cy5vbmRlcndpanNncm9lcHRpbGJ1cmcubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyC6QiQOohwdoGkToEGbCxnE/sE3t7vV/8ASB5tiX51TsakCPy
iXx3bRvYnav+Rib7soQJA3f+OWtB8idexmsViiVmQc8nbsprmg+4KQ12nlSoN+G6
VosZ3RTyYKbYVjGqvGFSQzAmmyiToD/vghwE5H69r70mjgDG8lQoSI9neDMir75d
PWo2gWzYBSNJ7YjjDO7szocBLAyb+xvCrOzBr/01lVo9/oh8hS46gCxjCJnc2K3a
E2J/obiWyvBSW5ME4YsKr4UG5M5KA4aRDcyBCNZHJ+mbJazwtaWKGQgkiCX9ixVP
GBVBzQdSTCNWLMIixaBqs7S35moMND6TazKHAgMBAAGjggLhMIIC3TAfBgNVHSME
GDAWgBRn/YggFCeYxwnSJRm76VERY3VQYjAdBgNVHQ4EFgQULyQDdFC2Y38Xxcel
JMRM7qcfAPcwLAYDVR0RBCUwI4Ihd2VidW50aXMub25kZXJ3aWpzZ3JvZXB0aWxi
dXJnLm5sMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L1RFUkVOQVNTTENBMy5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv
bS9URVJFTkFTU0xDQTMuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYI
KwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIC
MG4GCCsGAQUFBwEBBGIwYDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl
cnQuY29tMDgGCCsGAQUFBzAChixodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v
VEVSRU5BU1NMQ0EzLmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFiJTDr
ywAABAMARjBEAiB0pBzYNh8t6Z+JYIE/PKQYPQ+L4HRtzYqIGLVTEUAvKwIgYyWL
v5e2ZpxoUQ/GMg+2+TOrWEQh5R9NQAsaZ4JA+n0AdgBvU3asMfAxGdiZAKRRFf93
FRwR2QLBACkGjbIImjfZEwAAAWIlMO05AAAEAwBHMEUCIACH4l2eHbTEewPrypbc
IFdwfhYaZz/33E9p883S+TkdAiEAleUbu+xeHZLCuPwGoTLlH0tJ0tjaSDqB5IYi
en09lrYwDQYJKoZIhvcNAQELBQADggEBAJTA8k3OymSYC5GOvllvS527yD0NxaAG
uG6Umw58/9y27pWd9QhmEDkvZLr9Gjk1WTQWHZ36PcAGSOrQPfH+NkgPM1Hxu1/F
k0JWxIbP+qxUZ4MbRvEjkH5OhinHNMeOUuQdDuxe4eNTf7GvWFdkNIq6HKsXvN5X
Zx2+WQE4Cdutbc44UhAJ2+oONIJB3S2CX076zJrs04zTNuNQ8x7e3QRztHnSpMaN
NFTyH0ViT0qhJq+AXypl1lcHZqyCKZLICWSt+TC0q2PTfQR3SvK8W6r6rkk/HDG8
qqk1Mmkz80uxJXqaVdGECuhqBGhxzB0z0JMU8my4wBCpdTVfjB9497g=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgukIkDqIcHaBpE6BBmw
sZxP7BN7e71f/AEgebYl+dU7GpAj8ol8d20b2J2r/kYm+7KECQN3/jlrQfInXsZr
FYolZkHPJ27Ka5oPuCkNdp5UqDfhulaLGd0U8mCm2FYxqrxhUkMwJpsok6A/74Ic
BOR+va+9Jo4AxvJUKEiPZ3gzIq++XT1qNoFs2AUjSe2I4wzu7M6HASwMm/sbwqzs
wa/9NZVaPf6IfIUuOoAsYwiZ3Nit2hNif6G4lsrwUluTBOGLCq+FBuTOSgOGkQ3M
gQjWRyfpmyWs8LWlihkIJIgl/YsVTxgVQc0HUkwjVizCIsWgarO0t+ZqDDQ+k2sy
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4668274106653414368717592974154373323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tilburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Onderwijsgroep Tilburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT-Diensten'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webuntis.onderwijsgroeptilburg.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22476158747823562739118547418689955228371944877687567002543870041223946594190864823221391670250909908289555460608905769657201852859057918567887867105430923481654754876439383616073550443034534370604307881654475505746387752270221883825341274869624548358917846345154534573366153726847599902866618268548969946242536253772408615242088093139855656509239897824188358708438055580270097533540959343444012023002467551079622322383788743333425004163019007222140556476354028662610079849405178918693748366946851472546887130051902123963974545827241646743345666756480071535989338452841274239296198907890691010829244183062510297625223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f24037450b6637f17c5c7a524c44ceea71f00f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuntis.onderwijsgroeptilburg.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001622530ebcb0000040300463044022074a41cd8361f2de99f8960813f3ca4183d0f8be0746dcd8a8818b55311402f2b022063258bbf97b6669c68510fc6320fb6f933ab584421e51f4d400b1a678240fa7d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001622530ed39000004030047304502200087e25d9e1db4c47b03ebca96dc2057707e161a673ff7dc4f69f3cdd2f9391d02210095e51bbbec5e1d92c2b8fc06a132e51f4b49d2d8da483a81e486227a7d3d96b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0094c0f24dceca64980b918ebe596f4b9dbbc83d0dc5a006b86e949b0e7cffdcb6ee959df5086610392f64bafd1a39355934161d9dfa3dc00648ead03df1fe36480f3351f1bb5fc5934256c486cffaac5467831b46f123907e4e8629c734c78e52e41d0eec5ee1e3537fb1af585764348aba1cab17bcde57671dbe59013809dbad6dce38521009dbea0e348241dd2d825f4efacc9aecd38cd336e350f31ededd0473b479d2a4c68d3454f21f45624f4aa126af805f2a65d6570766ac822992c80964adf930b4ab63d37d04774af2bc5baafaae493f1c31bcaaa935326933f34bb1257a9a55d1840ae86a046871cc1d33d09314f26cb8c010a975355f8c1f78f7b8