weblosco1.dsi.universite-paris-saclay.fr

- UNIVERSITE PARIS-SACLAY -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0f:70:db:b2:33:36:ab:ec:7c:94:c6:0c:21:34:29:64 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UNIVERSITE PARIS-SACLAY

Organization: UNIVERSITE PARIS-SACLAY
Organization unit: Université-Paris-Saclay
Locality: Saint-Aubin
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:70:db:b2:33:36:ab:ec:7c:94:c6:0c:21:34:29:64
Serial Number (int): 20524413151095595425052435889771522404
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: de:67:65:9c:80:24:c2:3a:3b:cc:ba:48:49:c1:54:cd:01:9d:c6:9e
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 6f:f3:93:e4:b5:bc:f4:bb:b7:7c:2d:79:ac:f6:9b:c9:38:62:00:9a
Fingerprint (sha256): 2f:44:41:5b:0d:b9:05:78:1a:de:16:04:a2:ca:54:92:4a:03:20:e5:53:d5:a2:84:28:2d:32:22:ba:33:e0:0d

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate weblosco1.dsi.universite-paris-saclay.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for weblosco1.dsi.universite-paris-saclay.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

weblosco1.dsi.universite-paris-saclay.fr

Other certificates including the domain name universite-paris-saclay.fr

(limited to 100 certificates)
bbb.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
apo-wsprofiltest.dsi.universite-paris-saclay.fr
sports.universite-paris-saclay.fr
video.dsi.universite-paris-saclay.fr
connecteursprep.dsi.universite-paris-saclay.fr
apowebtest.dsi.universite-paris-saclay.fr
atlas.universite-paris-saclay.fr
hebergement.universite-paris-saclay.fr
piatest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.agora.universite-paris-saclay.fr
gitlab.dsi.universite-paris-saclay.fr
web-bib.imo.universite-paris-saclay.fr
snwtest.dsi.universite-paris-saclay.fr
inception.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.photo-club.asso.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
www2.lpgp.universite-paris-saclay.fr
gate.universite-paris-saclay.fr
www-test.c2n.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
ecandidatprep.dsi.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
rh.c2n.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.dpo.universite-paris-saclay.fr
www.faculte-sciences-sport.universite-paris-saclay.fr
lmodb.imo.universite-paris-saclay.fr
*.universite-paris-saclay.fr
awacstest.dsi.universite-paris-saclay.fr
pacestest.dsi.universite-paris-saclay.fr
ipa-user.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
iaprimotest.dsi.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
annuaire-ladiagonaletest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.ifsbm.universite-paris-saclay.fr
www.imo.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
www.sciences-sif.universite-paris-saclay.fr
resa.imo.universite-paris-saclay.fr
www.licence-pro-technico-commercial-cachan.u-psud.fr
bibliolabs.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
www.dep-chimie.universite-paris-saclay.fr
sso.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
pia.dsi.universite-paris-saclay.fr
sihamperso.universite-paris-saclay.fr
adonis-api.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.persay.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
Athena.universite-paris-saclay.fr
sihampersoform.dsi.universite-paris-saclay.fr
www.collecsciences.universite-paris-saclay.fr
www.cesfo.universite-paris-saclay.fr
*.portailtest.universite-paris-saclay.fr
ecandidattest-gestionnaire.dsi.universite-paris-saclay.fr
sportstest.dsi.universite-paris-saclay.fr
www.apoil.asso.universite-paris-saclay.fr
bdd.c2n.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
mahery2.imo.universite-paris-saclay.fr
re7-extranet.universite-paris-saclay.fr
bernardotest.dsi.universite-paris-saclay.fr
edith-www.c2n.universite-paris-saclay.fr
api.focus.universite-paris-saclay.fr
e-missions-dev.imo.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
share.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.kiosk-lpgp.universite-paris-saclay.fr
gateprep1.dsi.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
wp.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
idm1.idm.universite-paris-saclay.fr
bibliotheque.imo.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
extranet.universite-paris-saclay.fr
*.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
wims.universite-paris-saclay.fr
www.iut-orsay.universite-paris-saclay.fr
www.universite-paris-saclay.fr
copernic.universite-paris-saclay.fr
weblosco1.dsi.universite-paris-saclay.fr
www.biocis.universite-paris-saclay.fr
pjweb.universite-paris-saclay.fr

Certificate

The complete raw certificate details for weblosco1.dsi.universite-paris-saclay.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirSwBae3vfYXJF+VoYjT
KiGzDHZhqiBKbyORYiyHtYUn4jLfAaYQfjLUbTWe1Y5I1A3iLYhKtCe1i2wN4LxD
ylczv09it2AKrM+TsWNycKbPDoxvfyA/AkmwT3xHjAHAHtwVn9Q6v6UkmNZV3KGj
9Rhk/xvRb7732sPeAQXFjQLxTtloSzXN/cbwYvTxg+IYE9w0U1lrK6oq1Bbz2Ivx
/1B99oTUVV2RiQJvCoIwqPG9YXESEwJO0Kj14smac4pqUyT2I2HMgjD2MHIPukkU
WTOVHC/1FA2fC2N5Ma40rTW05tiMZYGDHmoWA8rHI+rFWJpL7ggmBuhDrMz/PKWd
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20524413151095595425052435889771522404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Aubin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNIVERSITE PARIS-SACLAY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université-Paris-Saclay'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weblosco1.dsi.universite-paris-saclay.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17509986454932287695909304209447778328012814927205270818763062359250413927946981527256149830381637511395794680174516859792656994683004796150834865821525564988847855792239206688689172828771169829174842229332803699856842862146887820288950169729590864808465722281983902437299910933044562031798281774165685092730615422218524107282412979271255997993069364194977627945246895480432952549771166849533871091387529005313893774248963477767028148526945506939594961631593464220478490216412757483766140669835555809883952825907445952568954222037791316813723721426781869336200726660270639813660564179634684591575206873973533943635433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de67659c8024c23a3bccba4849c154cd019dc69e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblosco1.dsi.universite-paris-saclay.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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