pf.deic.dk
Issued by TERENA SSL CA 2
About this certificate
This digital certificate with serial number a1:82:8f:c5:66:fa:73:c2:fe:0d:5a:2d:5e:7a:69:5b was issued on by TERENA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pf.deic.dk,OU=Domain Control Validated
TERENA
Organization:
TERENA
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
This certificate has expire since
Certificate Details
Serial Number (hex): a1:82:8f:c5:66:fa:73:c2:fe:0d:5a:2d:5e:7a:69:5bSerial Number (int): 214683621937372569753968153436719049051
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: da:2a:6c:0d:1e:8f:ce:55:16:75:9c:fe:a4:17:c4:47:b8:22:59:7d
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd
Fingerprint (sha1): 12:8e:44:85:40:c7:67:78:94:48:4c:de:99:17:57:91:a9:de:f4:c2
Fingerprint (sha256): 2f:b3:f6:13:a8:ff:93:3d:73:a8:2a:68:61:29:44:81:26:50:c9:fa:0b:56:c9:3b:a7:38:4d:b7:82:fe:f5:bb
Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl
Check the revocation status for certificate pf.deic.dk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pf.deic.dk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pf.deic.dk
Other certificates including the domain name deic.dk
(limited to 100 certificates)
gitlab.deic.dk
wayf.deic.dk
meet.deic.dk
filesender2.deic.dk
sciencedata.dk
unifi.net.deic.dk
gitlab.deic.dk
*.c.deic.dk
de161207.deic.dk
webpoint01.deic.eu
www.deic.dk
synore.sky.deic.dk
www.ddps.deic.dk
webpoint01.deic.eu
synnefo.sky.deic.dk
www.ddps.deic.dk
filesender.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
pithos.sky.deic.dk
gitlab.deic.dk
*.c.deic.dk
*.nyhedsbreve.deic.dk
dmponline.deic.dk
filesender.deic.dk
www.deic.dk
eduvpn.deic.dk
pf.deic.dk
info.net.deic.dk
www.cs3.deic.dk
de161207.deic.dk
gitlab.deic.dk
gitlab.deic.dk
wayf.c.deic.dk
wayf-udv.c.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
www.ddps.deic.dk
digiexam.deic.dk
blog.deic.dk
node68.sky.deic.dk
webstat.deic.dk
mitfsknet.deic.dk
eduvpn.deic.dk
test.data.deic.dk
gateway.dgw.deic.dk
*.dgw.deic.dk
eduvpn.deic.dk
admin.eduroam.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
pithore.sky.deic.dk
pithos.sky.deic.dk
c.deic.dk
*.c.deic.dk
www.abacus.deic.dk
dtuguest.deic.dk
c.deic.dk
sol.sky.deic.dk
gitlab.deic.dk
info.net.deic.dk
synore.sky.deic.dk
wayf.c.deic.dk
*.data.deic.dk
okeanos.deic.dk
pithos.deic.dk
silo1.data.deic.dk
info.net.deic.dk
data.deic.dk
webhotel.deic.dk
webpoint01.deic.eu
gitlab.deic.dk
www.blog.deic.dk
enav.net.deic.dk
unifi.net.deic.dk
digiexam.deic.dk
gitlab.deic.dk
gitlab.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
dtuguest.deic.dk
c.deic.dk
dmponline.deic.dk
deic.dk
*.dgw.deic.dk
filesender2.deic.dk
www.ddps.deic.dk
www.ddps.deic.dk
dmpsandbox.deic.dk
deic.dk
ipass.deic.dk
pithore.sky.deic.dk
synnefo.sky.deic.dk
*.dgw.deic.dk
webstat.deic.dk
radius1.eduroam.deic.dk
filesender.deic.dk
admin.eduroam.deic.dk
vidensportal.deic.dk
eduvpn.deic.dk
wayf.deic.dk
meet.deic.dk
filesender2.deic.dk
sciencedata.dk
unifi.net.deic.dk
gitlab.deic.dk
*.c.deic.dk
de161207.deic.dk
webpoint01.deic.eu
www.deic.dk
synore.sky.deic.dk
www.ddps.deic.dk
webpoint01.deic.eu
synnefo.sky.deic.dk
www.ddps.deic.dk
filesender.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
pithos.sky.deic.dk
gitlab.deic.dk
*.c.deic.dk
*.nyhedsbreve.deic.dk
dmponline.deic.dk
filesender.deic.dk
www.deic.dk
eduvpn.deic.dk
pf.deic.dk
info.net.deic.dk
www.cs3.deic.dk
de161207.deic.dk
gitlab.deic.dk
gitlab.deic.dk
wayf.c.deic.dk
wayf-udv.c.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
www.ddps.deic.dk
digiexam.deic.dk
blog.deic.dk
node68.sky.deic.dk
webstat.deic.dk
mitfsknet.deic.dk
eduvpn.deic.dk
test.data.deic.dk
gateway.dgw.deic.dk
*.dgw.deic.dk
eduvpn.deic.dk
admin.eduroam.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
pithore.sky.deic.dk
pithos.sky.deic.dk
c.deic.dk
*.c.deic.dk
www.abacus.deic.dk
dtuguest.deic.dk
c.deic.dk
sol.sky.deic.dk
gitlab.deic.dk
info.net.deic.dk
synore.sky.deic.dk
wayf.c.deic.dk
*.data.deic.dk
okeanos.deic.dk
pithos.deic.dk
silo1.data.deic.dk
info.net.deic.dk
data.deic.dk
webhotel.deic.dk
webpoint01.deic.eu
gitlab.deic.dk
www.blog.deic.dk
enav.net.deic.dk
unifi.net.deic.dk
digiexam.deic.dk
gitlab.deic.dk
gitlab.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
dtuguest.deic.dk
c.deic.dk
dmponline.deic.dk
deic.dk
*.dgw.deic.dk
filesender2.deic.dk
www.ddps.deic.dk
www.ddps.deic.dk
dmpsandbox.deic.dk
deic.dk
ipass.deic.dk
pithore.sky.deic.dk
synnefo.sky.deic.dk
*.dgw.deic.dk
webstat.deic.dk
radius1.eduroam.deic.dk
filesender.deic.dk
admin.eduroam.deic.dk
vidensportal.deic.dk
eduvpn.deic.dk
Certificate
The complete raw certificate details for pf.deic.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjzCCA3egAwIBAgIRAKGCj8Vm+nPC/g1aLV56aVswDQYJKoZIhvcNAQELBQAw ZDELMAkGA1UEBhMCTkwxFjAUBgNVBAgTDU5vb3JkLUhvbGxhbmQxEjAQBgNVBAcT CUFtc3RlcmRhbTEPMA0GA1UEChMGVEVSRU5BMRgwFgYDVQQDEw9URVJFTkEgU1NM IENBIDIwHhcNMTUwNDA4MDAwMDAwWhcNMTgwNDA3MjM1OTU5WjA4MSEwHwYDVQQL ExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxEzARBgNVBAMTCnBmLmRlaWMuZGsw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRw1DZeQLimA/W5kl2FDaq 78dzlf5Q1/P7iM6A7tdmY7F+S2ZpAaOFjpenzPpSNH4BEzEy3edCA+PCseXlZ577 gI2BO5TBhUcTXYN5+P2x0r0Kk4ei4/d3iX9mbSUqsJQ215C7s5FcylsGd5qk5aiD wNio6N29bMU6eiWqLMDePLxp3pNSJ2gieQRe07iN44Rm9Yc5oMJMmI+mgIfLmaPX 3W1T58IHYRe9uHphv/moMz3OT8JdqCW83qMG17rn/F2FE9NdRFx8eqF+MujgiG76 q3hsQpy+WLoyWodlICbBd1jBzDeBSn7aI9xecnnpU5F3VFrJ4AJXWAgmOGkXa6zd AgMBAAGjggFmMIIBYjAfBgNVHSMEGDAWgBRb0IocmjJb4LXdllQb4YYosP22vTAd BgNVHQ4EFgQU2ipsDR6PzlUWdZz+pBfER7giWX0wDgYDVR0PAQH/BAQDAgWgMAwG A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCIGA1Ud IAQbMBkwDQYLKwYBBAGyMQECAh0wCAYGZ4EMAQIBMDoGA1UdHwQzMDEwL6AtoCuG KWh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9URVJFTkFTU0xDQTIuY3JsMGwGCCsG AQUFBwEBBGAwXjA1BggrBgEFBQcwAoYpaHR0cDovL2NydC51c2VydHJ1c3QuY29t L1RFUkVOQVNTTENBMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0 cnVzdC5jb20wFQYDVR0RBA4wDIIKcGYuZGVpYy5kazANBgkqhkiG9w0BAQsFAAOC AQEAo19RulGWgnowZCmaFRSl3OWmH/FlA7yVu0A4/PH2DCvKJPUcGPI44I/15P94 2UyEzyiA8A7Of20vYR4wWwW6acz1IIzwNGyOMe2/IZRc0I/aWT0m+DZ3X1H8UOmt BaavLXEsguuvTnKRuwFrXJkrKG90/s1pUVv8jLuTBuMCB9iiaS4m9E+aK2LMmf5Q oCQOByu9UeGNTGRT/5+viYuCS4XSMBbd+OMvzaQI0CDVeDpXqh+65+gCDemKpHzt nlu/LKovKUwdFkdwdIyzb9ghCJVcE3LuPMP7Ve2r/JfXB2YB7ztj6OUSBQFFnewP VRJB/HRqImlj1iAmmeYN+4LNDw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cNQ2XkC4pgP1uZJdhQ2 qu/Hc5X+UNfz+4jOgO7XZmOxfktmaQGjhY6Xp8z6UjR+ARMxMt3nQgPjwrHl5Wee +4CNgTuUwYVHE12Defj9sdK9CpOHouP3d4l/Zm0lKrCUNteQu7ORXMpbBneapOWo g8DYqOjdvWzFOnolqizA3jy8ad6TUidoInkEXtO4jeOEZvWHOaDCTJiPpoCHy5mj 191tU+fCB2EXvbh6Yb/5qDM9zk/CXaglvN6jBte65/xdhRPTXURcfHqhfjLo4Ihu +qt4bEKcvli6MlqHZSAmwXdYwcw3gUp+2iPcXnJ56VORd1RayeACV1gIJjhpF2us 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 214683621937372569753968153436719049051 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pf.deic.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26480119557609748110901329507468869938666509727252751388354426033978863245991037443488324327732272031384073013890865186489881667895207331811493674160820404055805927206881550165812628753649061258597104284660416879075246997810624319151095626456534218483430235374961322185821104340373400844052814955404535924666224871868672211564423580022292164900960860122374490700258921379672257652640565957866224363594063490390074960516875485365209394459372219124546545065037351699810060524752808673171153020105950617018350041094363290967789092308358924881805773693400772636514304051039717653495534356842481295300381379062840525827293 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) da2a6c0d1e8fce5516759cfea417c447b822597d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pf.deic.dk' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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