ifmission.univ-grenoble-alpes.fr

- Université Grenoble Alpes -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 03:7b:75:b0:46:f8:eb:ed:7b:bd:10:75:ee:bc:ef:91 was issued on by TERENA.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Grenoble Alpes

Organization: Université Grenoble Alpes
Organization unit: Institut Fourier
Locality: Saint-Martin D'Hères
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:75:b0:46:f8:eb:ed:7b:bd:10:75:ee:bc:ef:91
Serial Number (int): 4628723508999639600660394139287613329
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f5:78:6d:de:9d:43:2d:e6:72:58:50:b7:b5:04:8a:b3:b3:35:74:8e
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 9d:91:34:87:83:71:7e:9f:f8:94:a4:41:e7:38:7b:5c:92:31:e0:f5
Fingerprint (sha256): 31:64:05:c0:14:43:86:95:1a:6f:2a:15:4a:d4:0d:f3:8e:f8:a6:d4:0a:ce:0a:3c:db:8b:2e:54:20:ea:e8:46

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate ifmission.univ-grenoble-alpes.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ifmission.univ-grenoble-alpes.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ifmission.univ-grenoble-alpes.fr
ifose.u-ga.fr
ifose.univ-grenoble-alpes.fr

Other certificates including the domain name univ-grenoble-alpes.fr

(limited to 100 certificates)
chamilo.iut2.univ-grenoble-alpes.fr
shib3v3.univ-grenoble-alpes.fr
iut1-srv-web18.univ-grenoble-alpes.fr
enquetes.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
copass.grenet.fr
miage-grenoble.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
gin5-serv.univ-grenoble-alpes.fr
fuga-media-stock.univ-grenoble-alpes.fr
www-fourier.univ-grenoble-alpes.fr
partage-lsi.univ-grenoble-alpes.fr
persyval-lab.univ-grenoble-alpes.fr
sk-cic-it.imag.fr
gricad-registry-test.univ-grenoble-alpes.fr
copass.grenet.fr
ifmail.univ-grenoble-alpes.fr
apple-uga.u-ga.fr
pilote.univ-grenoble-alpes.fr
gricad.univ-grenoble-alpes.fr
ist-web3.ujf-grenoble.fr
ufrim2ag.ujf-grenoble.fr
gin-serv.univ-grenoble-alpes.fr
lig-expire-web.imag.fr
echamilo.grenet.fr
datageosciences.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
fabmstic.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
self6.univ-grenoble-alpes.fr
ulea-wiki.univ-grenoble-alpes.fr
ifmission.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
sante-lsurvey.univ-grenoble-alpes.fr
iut1-culture-etudiant.univ-grenoble-alpes.fr
wcp.univ-grenoble-alpes.fr
self7.univ-grenoble-alpes.fr
if-forge.ujf-grenoble.fr
self.univ-grenoble-alpes.fr
resa-ictiss.imag.fr
vpn2-int.iut2.univ-grenoble-alpes.fr
iut1-mmi-moodle.univ-grenoble-alpes.fr
copass.grenet.fr
gricad-doc.univ-grenoble-alpes.fr
chamilo-uga-vs.grenet.fr
copass-client.grenet.fr
projects-call.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
ifmission.univ-grenoble-alpes.fr
ldap.iut2.upmf-grenoble.fr
*.gricad-pages.univ-grenoble-alpes.fr
portail.univ-grenoble-alpes.fr
www-liphy.ujf-grenoble.fr
self5.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
www-fourier.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
ist-geodyn.univ-grenoble-alpes.fr
im2ag-sgce.e.univ-grenoble-alpes.fr
ametys-uga.grenet.fr
shibboleth.univ-grenoble-alpes.fr
intranet-timc.imag.fr
cloud.univ-grenoble-alpes.fr
arpont.imag.fr
observatoire.univ-grenoble-alpes.fr
*.gricad-gitlab.univ-grenoble-alpes.fr
sum-graf.univ-grenoble-alpes.fr
iut1-srv-web14.univ-grenoble-alpes.fr
fourier.univ-grenoble-alpes.fr
lig-wwwphp.imag.fr
dev-1.u-ga.fr
ifforge.univ-grenoble-alpes.fr
auth.univ-grenoble-alpes.fr
ist-sismalp.osug.fr
*.comar-project.univ-grenoble-alpes.fr
eformation.univ-grenoble-alpes.fr
ljk.univ-grenoble-alpes.fr
im2ag-wiki.univ-grenoble-alpes.fr
help.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
veri-web-projects.univ-grenoble-alpes.fr
visio-preprod.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
www-info.iut2.upmf-grenoble.fr
www-fourier.ujf-grenoble.fr
iut1-srv-web19.univ-grenoble-alpes.fr
gin11-web.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cloud-test.univ-grenoble-alpes.fr
hal.univ-grenoble-alpes.fr
gricad-wiki.univ-grenoble-alpes.fr
chamilo-iut2-vs.grenet.fr
enquetes.univ-grenoble-alpes.fr
superdoc.iut2.univ-grenoble-alpes.fr

Certificate

The complete raw certificate details for ifmission.univ-grenoble-alpes.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EVE1yCQdw4h/J7daotD
G2J+YVy7EiPC5+qrxLt1cMpx5PVGKa12J07rhmm4BiQm5FUebrK/OFIDtgyzS/Q1
Db/CQN/KMKNSUmyGpM/YfSu9fuAdHFi1yWbeKHxLbLCty/fYFyd7ybCQ60EHDciz
DI+kMwBVa57lrGxr557CzQAJrcJhjTkbfk90B7rnzNCrFtHYclwMlDi7vOmrESwl
rz516kI2jjMjfLvi0bzbsvGgexk6Hc9Ba/oPzXSuNApposyVsH1KrFIsKsvC2o9t
XBhpICVLMb033PU2ndI3QF3N8hDJTPNSN1iIJONwGW0E7/ZCF3pDyObkp/obO9LJ
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4628723508999639600660394139287613329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint-Martin D'Hères'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Grenoble Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Institut Fourier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ifmission.univ-grenoble-alpes.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29321444523531185030057323407309830792010820197878173912703146657532914091469092126503668039821920341106072123081296564342049129252417657579505103368874306663498823817312042943217942015253962144350025204891522823042597859870019368072745514620719949064805246532777625897800183473567360401058480791154840481690123039132145806886371902669468074322672347824330884792427909782825795717780371305933340241436123114561113687319434553115709884651344629539937365502544402537095189682399567458098421995664414077377155480682335450485255937282631947455343069442119127293878032938364706661998623377862818686555003451700500996737497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5786dde9d432de6725850b7b5048ab3b335748e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifmission.univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifose.u-ga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifose.univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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