*.kia.prz.edu.pl

- Politechnika Rzeszowska im. Ignacego Łukasiewicza -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0d:af:60:7b:44:fe:72:c2:10:55:b2:07:ab:70:1a:b0 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Politechnika Rzeszowska im. Ignacego Łukasiewicza

Organization: Politechnika Rzeszowska im. Ignacego Łukasiewicza
Organization unit: Katedra Informatyki i Automatyki
Locality: Rzeszów
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:af:60:7b:44:fe:72:c2:10:55:b2:07:ab:70:1a:b0
Serial Number (int): 18190572773186030753274572129793219248
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5d:57:07:0a:24:1a:6e:8b:fd:5e:22:07:fc:f5:1e:01:05:25:f4:cd
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 30:0f:fa:66:42:0f:a4:66:c0:e5:06:00:e1:97:11:b9:49:24:e5:15
Fingerprint (sha256): 31:e7:1d:2a:aa:b9:f3:51:0e:63:4b:ed:01:22:6e:05:e1:a6:a6:87:57:6d:84:8a:ef:56:92:aa:97:77:42:3b

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.kia.prz.edu.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kia.prz.edu.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kia.prz.edu.pl
kia.prz.edu.pl

Other certificates including the domain name prz.edu.pl

(limited to 100 certificates)
pawel.prz.edu.pl
ketling.prz.edu.pl
katalog.prz.edu.pl
sbp.prz.edu.pl
*.portal.prz.edu.pl
kia.prz.edu.pl
ketling.prz.edu.pl
jerzy.prz.edu.pl
*.w.prz.edu.pl
obsada.prz.edu.pl
klik.prz.edu.pl
aszcz.strony.prz.edu.pl
et08.prz.edu.pl
forum.stud.prz.edu.pl
*.w.prz.edu.pl
kod.prz.edu.pl
graduacjawz.prz.edu.pl
power.prz.edu.pl
*.portal.prz.edu.pl
usosadm2.prz.edu.pl
nwiki.prz.edu.pl
pawel.prz.edu.pl
kia.prz.edu.pl
aszcz.strony.prz.edu.pl
*.sd.prz.edu.pl
power.prz.edu.pl
ketling.prz.edu.pl
power.prz.edu.pl
ketling.prz.edu.pl
konf.sasit.prz.edu.pl
legitymacje.prz.edu.pl
srs.prz.edu.pl
sprawozdania.kia.prz.edu.pl
kod.prz.edu.pl
stud.prz.edu.pl
biurokarier.prz.edu.pl
power.prz.edu.pl
usosapps.prz.edu.pl
ketling.prz.edu.pl
power.prz.edu.pl
graduacjawz.prz.edu.pl
ketling.prz.edu.pl
*.prz.edu.pl
praktyki-weii.prz.edu.pl
graduacjawz.prz.edu.pl
power.prz.edu.pl
*.w.prz.edu.pl
graduacjawz.prz.edu.pl
apd.prz.edu.pl
power.prz.edu.pl
jerzy.prz.edu.pl
power.prz.edu.pl
aszcz.strony.prz.edu.pl
stud.prz.edu.pl
*.w.prz.edu.pl
test.birt.prz.edu.pl
*.kia.prz.edu.pl
*.wbisia.prz.edu.pl
journals.prz.edu.pl
sprawozdania.kia.prz.edu.pl
ketling.prz.edu.pl
klik.prz.edu.pl
usosadm.prz.edu.pl
kni.prz.edu.pl
test.srs.prz.edu.pl
kni.prz.edu.pl
test.usos.prz.edu.pl
aszcz.strony.prz.edu.pl
stud.prz.edu.pl
test.usosapps.prz.edu.pl
krk.prz.edu.pl
biurokarier.prz.edu.pl
graduacjawz.prz.edu.pl
test.usosapps.prz.edu.pl
forum.stud.prz.edu.pl
ketling.prz.edu.pl
*.prz.edu.pl
biurokarier.prz.edu.pl
konf.sasit.prz.edu.pl
obsada.prz.edu.pl
stud.prz.edu.pl
graduacjawz.prz.edu.pl
aszcz.strony.prz.edu.pl
ankieter.prz.edu.pl
office.kia.prz.edu.pl
jerzy.prz.edu.pl
gw-admin.prz.edu.pl
usos.prz.edu.pl
vpn.prz.edu.pl
biurokarier.prz.edu.pl
biurokarier.prz.edu.pl
biurokarier.prz.edu.pl
usosapps.prz.edu.pl
oc.prz.edu.pl
kni.prz.edu.pl
test.usosadm.prz.edu.pl
imap.kia.prz.edu.pl
usosadm2.prz.edu.pl
podyplomowe.weii.prz.edu.pl
jerzy.prz.edu.pl

Certificate

The complete raw certificate details for *.kia.prz.edu.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgjCCBWqgAwIBAgIQDa9ge0T+csIQVbIHq3AasDANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xODAyMTkwMDAwMDBaFw0yMTAyMjMxMjAwMDBaMIGjMQswCQYDVQQG
EwJQTDERMA8GA1UEBwwIUnplc3rDs3cxOzA5BgNVBAoMMlBvbGl0ZWNobmlrYSBS
emVzem93c2thIGltLiBJZ25hY2VnbyDFgXVrYXNpZXdpY3phMSkwJwYDVQQLEyBL
YXRlZHJhIEluZm9ybWF0eWtpIGkgQXV0b21hdHlraTEZMBcGA1UEAwwQKi5raWEu
cHJ6LmVkdS5wbDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMc/g2iF
2TnRWVLuF0FOlbE/ZtGAmXnEk1uetn1AlLdOevVrAS058vdlzbHmZ+2+gkQ74X4v
AMZGy52gsrsRcQS3XvxSDs3WvZZ630/WgWX2RjzATtJqDOEGLfl/YYNWEaxb/5Xv
D387rICqYjeKYbQcmqgAx1JLpKfjkVD7Zm0hbu37/XEuf+j1FXbSAjrIbfF/NM05
/YfXO7x64DRH/MP2Zpl2dOAwRAmWF8rhAeLlsl5rjuUMdLFKCsbfsmudvHfrHDfw
8+kkX6gkiRrC2ZAaF6St0m2rhk3VdWuxA+FtIGxTiB7TyLEO3rSj66mIACRWo+Op
HzbW90TlQyAGgbHHLovE7pXL0LrwpZBNybJXZ/FXyRKivUs2pZEjkCvM/xPZ/rPk
rqreV+5VF+K6rr70TqBTQ6oSr2Ni+sd81D6MhNq/pVro5DUOPWqQ3oZItZxIixsF
gmpFuIrQH0t4vJbHxGcG2zVQyCwgVe0iJIiTyUKIuw4yWE8NwBF9iCUz7LTZEnMJ
lGiBjXuQPT2y4g/X2tZNfMM9YoIYR/gJQ8NplbO82BTRrN32SHUuOW98aF6eopak
gU5375QD9otD0QQiYRfU91Q6CwSOxnPGd5uDbjr8CzIqpB8/mS7F/oTnBq4exvF2
dCf4i7+/0yE5TpwmZbye5LOe617JV/AYpxYxAgMBAAGjggHuMIIB6jAfBgNVHSME
GDAWgBRn/YggFCeYxwnSJRm76VERY3VQYjAdBgNVHQ4EFgQUXVcHCiQabov9XiIH
/PUeAQUl9M0wKwYDVR0RBCQwIoIQKi5raWEucHJ6LmVkdS5wbIIOa2lhLnByei5l
ZHUucGwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v
VEVSRU5BU1NMQ0EzLmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29t
L1RFUkVOQVNTTENBMy5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr
BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw
bgYIKwYBBQUHAQEEYjBgMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy
dC5jb20wOAYIKwYBBQUHMAKGLGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9U
RVJFTkFTU0xDQTMuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBALQq/ws6Y0eC/g9VT/8xOTQyYhCjs9+kkDQO
wiCx57n+A+eVfIW0W31D549pmbfyaWYacYdy670wDBDBby+zEa9U2Ek3GcUxoxqQ
E11a3QSwTnQZKJZk/Q1L7CDElZM1X9r6zH0anJJNhP8Ut7NrqpddCLBsxvbJw78o
bEIxZ5bE/I7jxyqKShwPeTZr3pDMnzjUHttYTxeF8NU3Jjsk7QGQR+dUmdqWgLLe
FfN2OW6Ngu0WzkLzKUyLrheLBjzwKnsoUQn1W0mF943ky2CsNW4bfgMufcYrzL/u
p1ZHlOxZc4N/ofyFwkNhw8THkI8jBSP2uc4e9QdnaPpYYhKvXFg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18190572773186030753274572129793219248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rzeszów'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Politechnika Rzeszowska im. Ignacego Łukasiewicza'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Katedra Informatyki i Automatyki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kia.prz.edu.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812861324665849487673204211599546370790895615527687045527111598579042333425207668395861004492194094832594727681380264014072422242949586487287092587853577675278704303327391618225328730212195537194313397437174816339953212310220964098982848643775044389683793264377568261247953521432717293243800506786784306455265605495898106957232415252045973073453645501805675035409820558312577995574087576646966862265567143228293376373521587379483543279615617795818219414410758346637627015308206739528650248447073100093200456631859135700551856197720966137217082279823661635017795004668859238255666158640181032951801219500894865572616008344696695114667788683243355525352809888372185178733881246299004917629912240079618837441116776600448460821387550035222754165827484436483908435286169030163319064245224312768794939454131622296518791311739028962844389387253610931986341743540708215931254598528883925497570000727762752983574980650729244110410160803524836826984076066647379810618296882439680058701868556856930168149472030591902754816797444694708816961770283552814433400024611244379425388896599662188197517461298250297991378035278447938683367161373827441477357924362758355281028847002095969351161125699051281594241808351584425588165647035189966578163062321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d57070a241a6e8bfd5e2207fcf51e010525f4cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kia.prz.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kia.prz.edu.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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