www2.land-oberoesterreich.gv.at

- Land Oberösterreich -

Issued by TERENA SSL High Assurance CA 3

About this certificate

This digital certificate with serial number 09:f9:50:37:d6:fe:66:05:5c:a3:39:da:7e:35:53:99 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Land Oberösterreich

Company registration number: Government Entity
Organization: Land Oberösterreich
Organization unit: Abteilung Informationstechnologie
Address: Landhausplatz 1
Postal code: 4021
State / Province: Oberösterreich
Locality: Linz
Country: AT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 09:f9:50:37:d6:fe:66:05:5c:a3:39:da:7e:35:53:99
Serial Number (int): 13257560896693986394051016826633409433
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ad:71:d1:91:04:70:7a:2d:9d:92:ba:61:35:71:aa:0c:c5:bd:49:fb
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9

Fingerprint (sha1): 6b:c2:70:7b:3c:83:7d:c7:d5:7b:1a:58:bd:1d:64:84:49:96:6b:24
Fingerprint (sha256): 3e:99:f9:e0:8f:53:7e:47:05:70:1b:15:2e:e9:e0:d9:8c:f4:3b:64:5b:82:06:a0:22:9d:76:6f:55:41:a4:d7

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl

Check the revocation status for certificate www2.land-oberoesterreich.gv.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.land-oberoesterreich.gv.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.land-oberoesterreich.gv.at

Other certificates including the domain name land-oberoesterreich.gv.at

(limited to 100 certificates)
www.karriere.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
wahl.land-oberoesterreich.gv.at
testwahl.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
blackout.ooe.gv.at
www.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
blackout.ooe.gv.at
www1.land-oberoesterreich.gv.at
wahl.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
testwahl.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
test.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
testwahl.land-oberoesterreich.gv.at
wahl.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
wahl.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
blackout.ooe.gv.at
www.land-oberoesterreich.gv.at
blackout.ooe.gv.at
www.doris.at
www.karriere.land-oberoesterreich.gv.at

Certificate

The complete raw certificate details for www2.land-oberoesterreich.gv.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknKtrZyhfXiJ78TckVmf
MNUxV04A6AMlDl13pYADF7Po2nOkNRFYWLptvOrrSqUIdI13YHepOt48gBYEESj8
/NwiHecQo3fNZIbMgSGzSG920rm9rf3zFRScTxhaDGaElU3H6BB5QoJWEJ1IJ6Iu
0xfy+JWb4r7yXqVOZDna60LPmCIIB07f3GWCAI+LJhB/XOJdiyHotTER8jdi0UP+
yDmjfmShWj6GD5itG0klexYYFk8fkMob/pvKtcaCFSczQUWaFG1DYEcLoP7H601/
4P8qWo1oIu/ewvNycvKeu2mWRM3zX3u66C23q3c7ewswERmr0H0qzcGSs2YCKIMj
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13257560896693986394051016826633409433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Landhausplatz 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4021'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oberösterreich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Linz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Land Oberösterreich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abteilung Informationstechnologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.land-oberoesterreich.gv.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18487342566702231541349306708533297361058386041407576166843213401227630651066441033584871129563611046529190006896185869147578746897460374713705752297426673476248917602862629346656506159705595884815591209739210621938149134301577560882452944452583125583069075697935872894792627927900159369508138592147342987326568179869272911158129068227189548677599901103260220089282300218444473827165168712387652395818044908605983606428942589148665669028194538217318640037013244342359988807295213090452210458114379012570457517052006776815470888256382637206968117048999617827624635575489890156442242687477644335360969505584170907411333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad71d19104707a2d9d92ba613571aa0cc5bd49fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.land-oberoesterreich.gv.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015312ebe9b60000040300483046022100d121d0d09859d82c99aa9697f2edbd3852f7bda02b3fcf623a3038e7c655c472022100b21eb4ee145d0c052117becf2ff3229e20e39dc49a019f5ff23fe4611d5f228c00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015312ebe9810000040300473045022054e86119613b62d2bd3b87c1dc095e8c04830a801e0933eea21eabcb0ca66d6f022100bcfb3a787f21a40a2280f1013839f1be7fbdf28e4288f06c9f8c167d079e96bc0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015312ebeaf000000403004730450220604f675aaa3ab0f7a0d0a09dbf41572d4d19f2230936650cc1b7b73a1f44da5b022100b69a9c6bd0842b6c3548e2ec5b8b8f6c9a4904bd0c78fbc878d4e7d22a6eee44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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