scyence.cyi.ac.cy

- The Cyprus Institute -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0a:e0:0f:91:81:3e:7e:15:55:60:95:12:be:c8:c8:b0 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Cyprus Institute

Organization: The Cyprus Institute
Organization unit: Events
Locality: Nicosia
Country: CY

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:e0:0f:91:81:3e:7e:15:55:60:95:12:be:c8:c8:b0
Serial Number (int): 14455670218387694540694381049447762096
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 79:a3:84:ca:ab:83:7a:d1:08:f4:3b:69:05:d1:7c:01:7b:72:12:26
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 91:6a:6c:61:9d:10:eb:36:f8:e4:aa:51:16:9d:a1:de:60:88:a5:fd
Fingerprint (sha256): 3c:b3:2a:75:81:4f:8f:8f:ba:85:2c:b7:d1:94:eb:1b:e4:2e:bd:ea:34:ab:46:55:6a:41:a4:3f:a0:b1:69:4f

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate scyence.cyi.ac.cy

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scyence.cyi.ac.cy

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scyence.cyi.ac.cy
www.scyence.cyi.ac.cy

Other certificates including the domain name cyi.ac.cy

(limited to 100 certificates)
collaboration.cyi.ac.cy
dms.cyi.ac.cy
cao.cyi.ac.cy
sed.cyi.ac.cy
gs.cyi.ac.cy
collaboration.cyi.ac.cy
csp2018.cyi.ac.cy
fmc.cyi.ac.cy
rs1.cyi.ac.cy
supercomputing.cyi.ac.cy
nano4csp.cyi.ac.cy
mena-cordex.cyi.ac.cy
www.cyi.ac.cy
hpcsupport.cyi.ac.cy
nester.cyi.ac.cy
solarconcentrators.cyi.ac.cy
certifier2.cyi.ac.cy
eduroam.cyi.ac.cy
st.cyi.ac.cy
gravitate-1.cytera.cyi.ac.cy
dlpg.dioptra.cyi.ac.cy
sed.cyi.ac.cy
gateway.cyi.ac.cy
hpcsupport.cyi.ac.cy
akg.cyi.ac.cy
gravitate-2.cytera.cyi.ac.cy
*.cyi.ac.cy
gs.cyi.ac.cy
acd.cyi.ac.cy
www.cyi.ac.cy
sed.cyi.ac.cy
zenh.cyi.ac.cy
certpublisher.cyi.ac.cy
solarconcentrators.cyi.ac.cy
sed.cyi.ac.cy
mail.cyi.ac.cy
jobboard.cyi.ac.cy
password-generator.cyi.ac.cy
certpublisher.cyi.ac.cy
rs1.cyi.ac.cy
ewacc2012.cyi.ac.cy
akg.cyi.ac.cy
www.cyi.ac.cy
unifi.cyi.ac.cy
scyence.cyi.ac.cy
magnum.cyi.ac.cy
st.cyi.ac.cy
solarconcentrators.cyi.ac.cy
login2.cytera.cyi.ac.cy
ithelp.cyi.ac.cy
dc.cyi.ac.cy
st.cyi.ac.cy
scyence.cyi.ac.cy
cyi.ac.cy
crm.cyi.ac.cy
emme-care.cyi.ac.cy
usrl.cyi.ac.cy
www.cyi.ac.cy
proteas.cyi.ac.cy
certifier.cyi.ac.cy
www.cyi.ac.cy
dc2.cyi.ac.cy
prtg.cyi.ac.cy
emme-care.cyi.ac.cy
gravitate-2.cytera.cyi.ac.cy
face2face.cyi.ac.cy
promisedtwinning.cyi.ac.cy
apply.cyi.ac.cy
intranet.cyi.ac.cy
mena-cordex.cyi.ac.cy
scmt-j.cyi.ac.cy
gateway.cyi.ac.cy
www.cyi.ac.cy
ewacc2012.cyi.ac.cy
emme-care.cyi.ac.cy
mail1.cyi.ac.cy
supercomputingG1.cyi.ac.cy
mcities.cyi.ac.cy
sed.cyi.ac.cy
rs2.cyi.ac.cy
*.cyi.ac.cy
nano2lab.cyi.ac.cy
gravitate-1.cytera.cyi.ac.cy
cyi-fw.cyi.ac.cy
dioptra.cyi.ac.cy
akg.cyi.ac.cy
vpn.cyi.ac.cy
cafe.cyi.ac.cy
jobboard.cyi.ac.cy
usrl.cyi.ac.cy
nester.cyi.ac.cy
ewacc2013.cyi.ac.cy
nester.cyi.ac.cy
medici-dev.cyi.ac.cy
gravitate-1.cytera.cyi.ac.cy
policies.cyi.ac.cy
mybox.cyi.ac.cy
mail.hr.cyi.ac.cy
rms.cyi.ac.cy
gravitate-1.cytera.cyi.ac.cy

Certificate

The complete raw certificate details for scyence.cyi.ac.cy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGvDCCBaSgAwIBAgIQCuAPkYE+fhVVYJUSvsjIsDANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xODEyMDYwMDAwMDBaFw0yMDEyMTAxMjAwMDBaMGsxCzAJBgNVBAYT
AkNZMRAwDgYDVQQHEwdOaWNvc2lhMR0wGwYDVQQKExRUaGUgQ3lwcnVzIEluc3Rp
dHV0ZTEPMA0GA1UECxMGRXZlbnRzMRowGAYDVQQDExFzY3llbmNlLmN5aS5hYy5j
eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALXDDFHCFC69O+2LRZQD
WPGQVovg8MjEAdg0s0kUHNe/4zFwbOE1QaObGcw2dFkuc73jg53/HnB+hBy7poJ4
SqizUxFbgirkFJhMUDlxbPGkfskJwHqTBGq06yPIXxZ8/RIMbRDSzs8u1sNC4s9H
tZKR6R9WopiMdRHCCGLaEQI1lvf7PWmOoRcOZ3puNDm5W5XPDkki+B4Ag8HfmNOQ
ob1vfF2eTSNjWD/0nAlYgTnUqdZo/ThjXmQWs4U3YxAH0P5Rm8Y82Wd+0vkdzJ0L
fvnvo0PfZddArwGg1XFNjVeA4fDEYBatWtRElW16QpzRvFDGXoAs4IXcjufVtSaA
qdsCAwEAAaOCA2EwggNdMB8GA1UdIwQYMBaAFGf9iCAUJ5jHCdIlGbvpURFjdVBi
MB0GA1UdDgQWBBR5o4TKq4N60Qj0O2kF0XwBe3ISJjAzBgNVHREELDAqghFzY3ll
bmNlLmN5aS5hYy5jeYIVd3d3LnNjeWVuY2UuY3lpLmFjLmN5MA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAv
oC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcmww
L6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3Js
MEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG4GCCsGAQUFBwEBBGIwYDAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDgGCCsGAQUFBzAC
hixodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNydDAM
BgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQCkuQmQtBhY
FIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWeCqm7tAAAEAwBGMEQCIFpvCZGd
GHFtfoT2i/Kq416nyeeE3rfS3QIvMAu9QcYsAiBMLWC2c/1d4QbNJ0OaqMiIXfQO
TE2vg4QODvNjDIbXKwB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMP
AAABZ4Kqb8kAAAQDAEYwRAIgIUIRDTGP1cdo2uGJbrCkQ7UPCBIuq8i/5fk/iUtq
eaoCIBaq8bGCiHFOcJvjWZEPLShuUg/M9lOknJapi0n+LcwIAHYAb1N2rDHwMRnY
mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFngqpwSQAABAMARzBFAiB+4SnPIBtv
9OXWIz/2zfBJsNp3X9znY7VS0D8PfDRPZgIhAOSBywFvZuQVTQDnlrF6a+gnrwD5
hSZpBQraEKWAccehMA0GCSqGSIb3DQEBCwUAA4IBAQBk/KHYDbRBeWwHndUS+y0X
5CfhD90rGJCRLNPDeO7znoyi60Q2VoyXMELGaaHlCrJ1SRkeeBQHkL9CDidFAqTs
UXFa5JdGLwJ159UUZ7obSdhwVR5usRfB+PMRyxfrxYZXLaS8GO7WldwVNTcfNJma
en2glY47jNioVH+J0fvJpRVp56y+oM5F1CABESWuzp57WIDbZ7nbBLYcj7De/g7t
eD8MvbuutiG8o+ZfaUueFCXyXil0xN5ouXhIgVd6UP8jnY4v5V2j0tMWG+npipRE
+2kzePztBR5JnFk2SEKEBjPtQcWPxzQtDanW5khWwBGAaeANXqeqjCxn81XObBhX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcMMUcIULr077YtFlANY
8ZBWi+DwyMQB2DSzSRQc17/jMXBs4TVBo5sZzDZ0WS5zveODnf8ecH6EHLumgnhK
qLNTEVuCKuQUmExQOXFs8aR+yQnAepMEarTrI8hfFnz9EgxtENLOzy7Ww0Liz0e1
kpHpH1aimIx1EcIIYtoRAjWW9/s9aY6hFw5nem40Oblblc8OSSL4HgCDwd+Y05Ch
vW98XZ5NI2NYP/ScCViBOdSp1mj9OGNeZBazhTdjEAfQ/lGbxjzZZ37S+R3MnQt+
+e+jQ99l10CvAaDVcU2NV4Dh8MRgFq1a1ESVbXpCnNG8UMZegCzghdyO59W1JoCp
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14455670218387694540694381049447762096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nicosia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Cyprus Institute'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Events'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scyence.cyi.ac.cy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22945315012821409409274003638747531357783264192485849099865402827003141437919832401638910595439144153279948434175933308528101461040679428057181023806551875906787042828407967932302697642961346933049896407838948307429707633762709841427450386997489852556091343065406422165706933492993035702528139540686514908851455025394734472697987297624243101541705032099872452420506042895764898905419807974808122951525258234925441277231932418152280383107056735851110776761440276046880285565523645342240527064235477027776949076581039803035980223679634998532658785224606880451505417109084936515408711386716832928992894358263268034783707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79a384caab837ad108f43b6905d17c017b721226
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scyence.cyi.ac.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scyence.cyi.ac.cy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016782aa6eed000004030046304402205a6f09919d18716d7e84f68bf2aae35ea7c9e784deb7d2dd022f300bbd41c62c02204c2d60b673fd5de106cd27439aa8c8885df40e4c4daf83840e0ef3630c86d72b0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016782aa6fc9000004030046304402202142110d318fd5c768dae1896eb0a443b50f08122eabc8bfe5f93f894b6a79aa022016aaf1b18288714e709be359910f2d286e520fccf653a49c96a98b49fe2dcc080076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016782aa7049000004030047304502207ee129cf201b6ff4e5d6233ff6cdf049b0da775fdce763b552d03f0f7c344f66022100e481cb016f66e4154d00e796b17a6be827af00f9852669050ada10a58071c7a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064fca1d80db441796c079dd512fb2d17e427e10fdd2b1890912cd3c378eef39e8ca2eb4436568c973042c669a1e50ab27549191e78140790bf420e274502a4ec51715ae497462f0275e7d51467ba1b49d870551e6eb117c1f8f311cb17ebc586572da4bc18eed695dc1535371f34999a7a7da0958e3b8cd8a8547f89d1fbc9a51569e7acbea0ce45d420011125aece9e7b5880db67b9db04b61c8fb0defe0eed783f0cbdbbaeb621bca3e65f694b9e1425f25e2974c4de68b9784881577a50ff239d8e2fe55da3d2d3161be9e98a9444fb693378fced051e499c59364842840633ed41c58fc7342d0da9d6e64856c0118069e00d5ea7aa8c2c67f355ce6c1857