if-forge.univ-grenoble-alpes.fr

- Université Grenoble Alpes -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0a:39:fa:aa:c4:17:e8:e6:d7:82:58:e4:c3:e7:f7:23 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Grenoble Alpes

Organization: Université Grenoble Alpes
Locality: Saint Martin D'Hères
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:39:fa:aa:c4:17:e8:e6:d7:82:58:e4:c3:e7:f7:23
Serial Number (int): 13593325010662151312546691465513269027
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cb:15:8e:ef:58:98:60:74:11:95:38:07:c2:d0:4e:18:55:59:be:6f
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 01:52:e9:00:10:09:4a:59:a3:23:3c:f6:b3:fc:d8:6e:e9:56:4c:71
Fingerprint (sha256): 30:64:ef:60:a4:74:58:e5:9e:3c:87:44:a1:7f:35:a1:be:ac:80:74:31:88:fc:70:3c:fd:c2:4a:0c:7f:13:c7

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate if-forge.univ-grenoble-alpes.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for if-forge.univ-grenoble-alpes.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

if-forge.univ-grenoble-alpes.fr
if-forge.ujf-grenoble.fr

Other certificates including the domain name univ-grenoble-alpes.fr

(limited to 100 certificates)
chamilo.iut2.univ-grenoble-alpes.fr
shib3v3.univ-grenoble-alpes.fr
iut1-srv-web18.univ-grenoble-alpes.fr
enquetes.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
copass.grenet.fr
miage-grenoble.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
gin5-serv.univ-grenoble-alpes.fr
fuga-media-stock.univ-grenoble-alpes.fr
www-fourier.univ-grenoble-alpes.fr
partage-lsi.univ-grenoble-alpes.fr
persyval-lab.univ-grenoble-alpes.fr
sk-cic-it.imag.fr
gricad-registry-test.univ-grenoble-alpes.fr
copass.grenet.fr
ifmail.univ-grenoble-alpes.fr
apple-uga.u-ga.fr
pilote.univ-grenoble-alpes.fr
gricad.univ-grenoble-alpes.fr
ist-web3.ujf-grenoble.fr
ufrim2ag.ujf-grenoble.fr
gin-serv.univ-grenoble-alpes.fr
lig-expire-web.imag.fr
echamilo.grenet.fr
datageosciences.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
fabmstic.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
self6.univ-grenoble-alpes.fr
ulea-wiki.univ-grenoble-alpes.fr
ifmission.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
sante-lsurvey.univ-grenoble-alpes.fr
iut1-culture-etudiant.univ-grenoble-alpes.fr
wcp.univ-grenoble-alpes.fr
self7.univ-grenoble-alpes.fr
if-forge.ujf-grenoble.fr
self.univ-grenoble-alpes.fr
resa-ictiss.imag.fr
vpn2-int.iut2.univ-grenoble-alpes.fr
iut1-mmi-moodle.univ-grenoble-alpes.fr
copass.grenet.fr
gricad-doc.univ-grenoble-alpes.fr
chamilo-uga-vs.grenet.fr
copass-client.grenet.fr
projects-call.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
ifmission.univ-grenoble-alpes.fr
ldap.iut2.upmf-grenoble.fr
*.gricad-pages.univ-grenoble-alpes.fr
portail.univ-grenoble-alpes.fr
www-liphy.ujf-grenoble.fr
self5.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
www-fourier.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
ist-geodyn.univ-grenoble-alpes.fr
im2ag-sgce.e.univ-grenoble-alpes.fr
ametys-uga.grenet.fr
shibboleth.univ-grenoble-alpes.fr
intranet-timc.imag.fr
cloud.univ-grenoble-alpes.fr
arpont.imag.fr
observatoire.univ-grenoble-alpes.fr
*.gricad-gitlab.univ-grenoble-alpes.fr
sum-graf.univ-grenoble-alpes.fr
iut1-srv-web14.univ-grenoble-alpes.fr
fourier.univ-grenoble-alpes.fr
lig-wwwphp.imag.fr
dev-1.u-ga.fr
ifforge.univ-grenoble-alpes.fr
auth.univ-grenoble-alpes.fr
ist-sismalp.osug.fr
*.comar-project.univ-grenoble-alpes.fr
eformation.univ-grenoble-alpes.fr
ljk.univ-grenoble-alpes.fr
im2ag-wiki.univ-grenoble-alpes.fr
help.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
veri-web-projects.univ-grenoble-alpes.fr
visio-preprod.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
www-info.iut2.upmf-grenoble.fr
www-fourier.ujf-grenoble.fr
iut1-srv-web19.univ-grenoble-alpes.fr
gin11-web.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cloud-test.univ-grenoble-alpes.fr
hal.univ-grenoble-alpes.fr
gricad-wiki.univ-grenoble-alpes.fr
chamilo-iut2-vs.grenet.fr
enquetes.univ-grenoble-alpes.fr
superdoc.iut2.univ-grenoble-alpes.fr

Certificate

The complete raw certificate details for if-forge.univ-grenoble-alpes.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIQCjn6qsQX6ObXgljkw+f3IzANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xOTEyMTEwMDAwMDBaFw0yMTEyMTUxMjAwMDBaMHwxCzAJBgNVBAYT
AkZSMR4wHAYDVQQHDBVTYWludCBNYXJ0aW4gRCdIw6hyZXMxIzAhBgNVBAoMGlVu
aXZlcnNpdMOpIEdyZW5vYmxlIEFscGVzMSgwJgYDVQQDEx9pZi1mb3JnZS51bml2
LWdyZW5vYmxlLWFscGVzLmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSRUsrwtHG7PWaKp/yn6iR7/cVCM3DAR9JjpjAJfz3ONdygcBppXqu5KpVL6
3UZvr0d2/f+wQid+f2xSwE7TJVrx42kZYfofs/fcP35xooL4jE9QRQeZg0l9tWmU
i0lvof9vkpVZX6W+UcS7ksWDQ2cDaUpGzhlCWCsCYdgQOApVozcoDBeDwFsgIsVq
vInyRJoCt0cvNR2PTtHhoKWfiWPUvUe10eKyqEw78qw9d0arXH0jzBR2YL2W1GP0
59x8oOois3XGKE6gRhI/NpKGxt7dH9JsmkOHNzPfa31xTGtpVt7HcEB54itmAF9Q
F8n/sm4DiGViWVmuBbkGQUaNwQIDAQABo4ICBzCCAgMwHwYDVR0jBBgwFoAUZ/2I
IBQnmMcJ0iUZu+lREWN1UGIwHQYDVR0OBBYEFMsVju9YmGB0EZU4B8LQThhVWb5v
MEQGA1UdEQQ9MDuCH2lmLWZvcmdlLnVuaXYtZ3Jlbm9ibGUtYWxwZXMuZnKCGGlm
LWZvcmdlLnVqZi1ncmVub2JsZS5mcjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9j
cmwzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3JsMC+gLaArhilodHRwOi8v
Y3JsNC5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNybDBMBgNVHSAERTBDMDcG
CWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMAgGBmeBDAECAjBuBggrBgEFBQcBAQRiMGAwJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA4BggrBgEFBQcwAoYsaHR0cDovL2NhY2Vy
dHMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcnQwDAYDVR0TAQH/BAIwADAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEo87f+AVBQEk
wChBiQZ+x8OZ5U0ko/HHgw9JTzz+XWvRlWb6DEa7eQkk38lhloZJNAxQaEUy2wDW
X0evXGQl/ZrHI+ARqMTx8FZnd2cV0Tk6TiPmY0sA9eQN+E7DyfJC+QJg2Jpt2BLN
CGETpi2xC+7PnKPVDw575VnQaRJ/eOPlMInnMimtrTG5RQ7//PUTzj4ztYSGlo5I
7CHV66dxEF7m74rh9HwxFVQvH76TpMavJNX57s8/s9IXBJseGeDhp5FvRWNnVBJp
rCs/TAJfAyxQ0rs4uZdY/W2nTN+LUTloJ8QznwFk0bT9yQkPA5r1V+CK3WQ55apJ
fjNtrYineA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSRUsrwtHG7PWaKp/yn6
iR7/cVCM3DAR9JjpjAJfz3ONdygcBppXqu5KpVL63UZvr0d2/f+wQid+f2xSwE7T
JVrx42kZYfofs/fcP35xooL4jE9QRQeZg0l9tWmUi0lvof9vkpVZX6W+UcS7ksWD
Q2cDaUpGzhlCWCsCYdgQOApVozcoDBeDwFsgIsVqvInyRJoCt0cvNR2PTtHhoKWf
iWPUvUe10eKyqEw78qw9d0arXH0jzBR2YL2W1GP059x8oOois3XGKE6gRhI/NpKG
xt7dH9JsmkOHNzPfa31xTGtpVt7HcEB54itmAF9QF8n/sm4DiGViWVmuBbkGQUaN
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13593325010662151312546691465513269027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint Martin D'Hères'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Grenoble Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'if-forge.univ-grenoble-alpes.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23372001829696934742669965737877918754070963995219694449282406830513753775744801566382052971913848513211037995772989781215584871931579694901072674490799627104362126382213225646308268093556778129887371071698799600319282433246663973990064306874287368993009612107967259030953399589857609254423442261713026421219611610541659533980851608406733763673907720450877594282842515350914931625309742925637807189169482285191796008148005718739616512603510790088969693528643230906444554021518590965920602856960888744513050170916876706672459791541941079015189676102999981686153896316710653341903834624176344585523867108008806226234817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb158eef5898607411953807c2d04e185559be6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'if-forge.univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'if-forge.ujf-grenoble.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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