strategia2020plus.man.poznan.pl

- Instytut Chemii Bioorganicznej Polskiej Akademii Nauk -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 03:9e:a5:65:cf:2a:b1:18:b8:35:cd:f4:71:f3:e5:44 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Instytut Chemii Bioorganicznej Polskiej Akademii Nauk

Organization: Instytut Chemii Bioorganicznej Polskiej Akademii Nauk
Organization unit: Poznanskie Centrum Superkomputerowo-Sieciowe
Locality: Poznań
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:a5:65:cf:2a:b1:18:b8:35:cd:f4:71:f3:e5:44
Serial Number (int): 4811421554747275082642599119370315076
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3b:97:ab:63:28:4b:b9:df:ab:57:91:ec:e3:5a:92:e2:38:3f:c2:c9
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 3a:f1:b2:67:c1:fd:af:2e:51:92:94:58:77:78:74:2b:c7:7f:e4:df
Fingerprint (sha256): 3c:de:14:9d:83:14:ca:bb:75:ff:ed:9f:46:f4:e9:6c:0a:5e:76:a8:88:43:83:9c:aa:da:c7:eb:74:ae:6d:d9

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate strategia2020plus.man.poznan.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for strategia2020plus.man.poznan.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

strategia2020plus.man.poznan.pl

Other certificates including the domain name man.poznan.pl

(limited to 100 certificates)
arum.man.poznan.pl
padus.man.poznan.pl
www.pogoda.man.poznan.pl
lonicera.man.poznan.pl
news.man.poznan.pl
bursera.man.poznan.pl
jira.man.poznan.pl
paris.man.poznan.pl
avena2.man.poznan.pl
symbiote-dev.man.poznan.pl
smartzoo.man.poznan.pl
nogalia.man.poznan.pl
jira.man.poznan.pl
symbiote-open.man.poznan.pl
tickets.tmp.man.poznan.pl
bellis-f.man.poznan.pl
avena2.man.poznan.pl
ibl-bpp.tmp.man.poznan.pl
apps.man.poznan.pl
rebutia.man.poznan.pl
www.wlin.pl
moss3.man.poznan.pl
ranzania.man.poznan.pl
foodie-vm3.man.poznan.pl
meteo.man.poznan.pl
padus.man.poznan.pl
ammi.man.poznan.pl
codon.man.poznan.pl
www.pogoda.man.poznan.pl
owncloud.man.poznan.pl
gazella.tmp.man.poznan.pl
lappula.man.poznan.pl
vine.man.poznan.pl
ibl-pbl.tmp.man.poznan.pl
symbiote.man.poznan.pl
codon.man.poznan.pl
symbiote-open.man.poznan.pl
piwik.man.poznan.pl
smartzoo.man.poznan.pl
paris.man.poznan.pl
monstera.man.poznan.pl
balsa.man.poznan.pl
malva.man.poznan.pl
berula.man.poznan.pl
ferula.man.poznan.pl
gitlab.pcss.pl
adonis.man.poznan.pl
lime.man.poznan.pl
sunflower.man.poznan.pl
piwik.man.poznan.pl
prunus-61.man.poznan.pl
symbiote-dev.man.poznan.pl
lime.man.poznan.pl
gymnocladus.man.poznan.pl
nogalia.man.poznan.pl
rhus-106.man.poznan.pl
mahonia.man.poznan.pl
loheria.man.poznan.pl
wiki.man.poznan.pl
epad.man.poznan.pl
webmail.man.poznan.pl
projekty.drive.man.poznan.pl
symbiote-dev.man.poznan.pl
spacewalk.man.poznan.pl
verbena.man.poznan.pl
gitlab.pcss.pl
pogoda.man.poznan.pl
periploca.man.poznan.pl
helianthus.mgmt.man.poznan.pl
hibiscus.man.poznan.pl
epad.man.poznan.pl
rebutia.man.poznan.pl
symbiote-dev.man.poznan.pl
phelum.man.poznan.pl
codon.man.poznan.pl
nogalia.man.poznan.pl
jira.man.poznan.pl
turn1.man.poznan.pl
coldenia.man.poznan.pl
ftp.man.poznan.pl
hpc.man.poznan.pl
armeria.man.poznan.pl
git.man.poznan.pl
apps.man.poznan.pl
ferula.man.poznan.pl
gridlab.man.poznan.pl
registry.apps.man.poznan.pl
worm.man.poznan.pl
meteo.man.poznan.pl
fresenia.man.poznan.pl
arum.man.poznan.pl
codon.man.poznan.pl
cortusa.man.poznan.pl
lappula.man.poznan.pl
strategia2020plus.man.poznan.pl
meteo.man.poznan.pl
mahonia.man.poznan.pl
wiki.man.poznan.pl
avena2.man.poznan.pl
symbiote.man.poznan.pl

Certificate

The complete raw certificate details for strategia2020plus.man.poznan.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAso1YaiWteWnYjyl2Qt7Y
rJFy/4PZLG1au7P6AH9ZGW90IsDeDC2wxfwkwZnWjvfo0SkGa0NzdDbZ7s4Yg8nw
SU2UziwEOVG+FxiwLi8sMFFf+3/bNIcasvaQFrym6HTb3nrcNLBNe0yzfUUv0XAB
t79bUFM96jS7Yw6htBLUBAUfQAC3pJhUjhOsfaHr9OdfxklVRBrfrdCy02B3TkoV
c12Y+Ys+D8kJFTVYPdMMVTUO+b4LWlreNyRlafyax2jTdAm2kh1+l99tVndf4FyE
jmFipEAIBqQt3oDVHQ1FXIwFRwTkK/LgF0nsP1znVWb5kwUAONcGxCJ3ZO7myKlN
cPHeX8Tip24hhGkARZZKgMTF1Nu98a35o1wVCkhVTHFQOoHN5zG7GUaJkYb11QgZ
oXoRDmNnrTfDTBOpEaJYUl1PWfq5V36A2PBqRhR6UFLCJ6sORcHAVjMAjKN4ZsOV
wEwWRfZ62m+bAGB29UcSZ29yx8kvlDPvpF/enhOpLvYpnaQrmkV/C6hpg//tDi3P
xARepsgz0zkL1al5LDZMd2FFhp8zAfQfUWYGVi+zVTz8TROSNUkzmXtXS05d289g
j3q2JWahJE1oXExzKetbHH4I0agLF+/H0Ta6mUobV9OBbm8rnByhyWH5xPDL/4yW
o40AugZ+XYxy0lwJD3uPux8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4811421554747275082642599119370315076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Poznań'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instytut Chemii Bioorganicznej Polskiej Akademii Nauk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Poznanskie Centrum Superkomputerowo-Sieciowe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'strategia2020plus.man.poznan.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728429139415967475271835913780673981962076357589113366648335565701121472145199941862277850393396297293916087947703052267768051862650140275669133023514682485899456536600635653037308361897937293509511595395390131036630200935348785667999144975034970502758927892100734935276529150621839615603451847971644384831296108655350797754959190783557517143010979077213151571887394757446654997194692034851749049622250559211604986215277795214160678541916555548479222177338827267359011641567669347458418532384559428154395414868493665827750651159159655404713694954929627452917844113470977642936628113321801753678560878611993755080257457957292668718818438663281442993173471827344691533632444468688190843989150753262566222026073958571875538668548575797542662674925902011373246328640513000691006038522946248575733933560586390425505571888823541844048633675467399331934414132051593538919134857686410235285935251431240805595792985569471838059398240364635013250660870128553392027467288497476644361059477164523036984144671033122646186011132082898512040272956759520389099870688174831305149063234276176998844288137982836921620890101242064122136725652700722373860041630515169143205232574765688677911696824029648913935772796346164566630099377344055047633769577247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b97ab63284bb9dfab5791ece35a92e2383fc2c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategia2020plus.man.poznan.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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