www.tenalea.net

Issued by TERENA SSL CA 3

About this certificate


This digital certificate with serial number 03:1d:aa:42:35:7d:7f:ee:c3:d2:a9:28:a2:14:01:4b was issued on by TERENA .

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Stichting Het Nederlands Kanker Instituut-Antoni van Leeuwenhoek Ziekenhuis

Organization: Stichting Het Nederlands Kanker Instituut-Antoni van Leeuwenhoek Ziekenhuis
Organization unit: TENALEA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 03:1d:aa:42:35:7d:7f:ee:c3:d2:a9:28:a2:14:01:4b
Serial Number (int): 4141713851498029738319215632563044683
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 35:f1:f8:f9:31:c9:f1:7b:15:2b:43:24:3b:85:87:62:8f:f0:8b:4c
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): cb:69:7a:83:a9:c6:d8:7b:ac:0f:6d:8b:1f:33:fa:f4:54:97:d0:cc
Fingerprint (sha256): 4d:87:0f:5a:29:24:ed:30:90:10:00:a8:02:2f:c0:b2:21:ee:a6:ff:9f:e5:04:f2:5a:d1:85:39:3c:d4:71:c7

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for the current certificate on www.tenalea.net
18
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tenalea.net
prod.tenalea.net
acc.tenalea.net
test.tenalea.net
dev.tenalea.net
sdd.tenalea.net
sdt.tenalea.net
sda.tenalea.net
demo.tenalea.net
it.tenalea.net
nl.tenalea.net
fr.tenalea.net
de.tenalea.net
uk.tenalea.net
tsg1.tenalea.net
tsg2.tenalea.net
tsg3.tenalea.net
evs.tenalea.net

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHnDCCBoSgAwIBAgIQAx2qQjV9f+7D0qkoohQBSzANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0xNTExMTIwMDAwMDBaFw0xODExMTYxMjAwMDBaMIG7MQswCQYDVQQG EwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFt MVQwUgYDVQQKE0tTdGljaHRpbmcgSGV0IE5lZGVybGFuZHMgS2Fua2VyIEluc3Rp dHV1dC1BbnRvbmkgdmFuIExlZXV3ZW5ob2VrIFppZWtlbmh1aXMxEDAOBgNVBAsT B1RFTkFMRUExGDAWBgNVBAMTD3d3dy50ZW5hbGVhLm5ldDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAN64oVbj/RiDcdAbMjCOeArrW+x2UfNSroQcJy3o 4cO9HL0cfmo/E86vqf331a606GaGbVpoY6Ep+RkxOswt4zySz9hrSJtd8fSTctVN tcE5f4VL5CbRV7HhggFmxZczFo1aY2299COvdrAJNJSu9d9rD1GqBl810LuwQWX+ 4naC04nVb9hz3pD0j/Sv81zf8g+xNGO5idrCbLtgKPW3EsYLKEOPjYlsI6+trDUp 35aY7k682fg4g3wV++omoY+ZDf9526nNrC6vzqrxIGDpzhOpA6h7z7gWUC+7BpSu n0NLR6BTZLf+RIYYybKFHPDAU+CYuso+Sr4rnVJLq2X7Ulr+KZnP0JmSJumQtS/H 3bsJCfA1iHehm7Hjhcg95frc49HV0FVy/g28fKBhjkMNxJ4HZeizT5rzCU5/dUeN ZCrxaPHwEAr94P7LWMbckdEkWbAkx+oWQYWJt8W1lspZ2mobMZ4MSIRC8lOh5h3A y1fp0FESTZefh+7NgI4eN9ONPD0Hn3c9zHhPeuZz+9X/FNiDGJy7DflV9GkyV1lr 9ax5h3WCWjkwb8o2Gkof47fz6qsVeA5VsxlL2w2wOg/t5k9NeneR5LesJwU4X5+g QI/K0xWZJ8Aeqlfh6mhF5qc0jaUhPjoV8ZGWxkirT61O8Km/RvOJQJOJbeZ/HVZ7 v6wLAgMBAAGjggLwMIIC7DAfBgNVHSMEGDAWgBRn/YggFCeYxwnSJRm76VERY3VQ YjAdBgNVHQ4EFgQUNfH4+THJ8XsVK0MkO4WHYo/wi0wwggFABgNVHREEggE3MIIB M4IPd3d3LnRlbmFsZWEubmV0ghBwcm9kLnRlbmFsZWEubmV0gg9hY2MudGVuYWxl YS5uZXSCEHRlc3QudGVuYWxlYS5uZXSCD2Rldi50ZW5hbGVhLm5ldIIPc2RkLnRl bmFsZWEubmV0gg9zZHQudGVuYWxlYS5uZXSCD3NkYS50ZW5hbGVhLm5ldIIQZGVt by50ZW5hbGVhLm5ldIIOaXQudGVuYWxlYS5uZXSCDm5sLnRlbmFsZWEubmV0gg5m ci50ZW5hbGVhLm5ldIIOZGUudGVuYWxlYS5uZXSCDnVrLnRlbmFsZWEubmV0ghB0 c2cxLnRlbmFsZWEubmV0ghB0c2cyLnRlbmFsZWEubmV0ghB0c2czLnRlbmFsZWEu bmV0gg9ldnMudGVuYWxlYS5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3Js My5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNybDAvoC2gK4YpaHR0cDovL2Ny bDQuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcmwwTAYDVR0gBEUwQzA3Bglg hkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29t L0NQUzAIBgZngQwBAgIwbgYIKwYBBQUHAQEEYjBgMCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wOAYIKwYBBQUHMAKGLGh0dHA6Ly9jYWNlcnRz LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3J0MAwGA1UdEwEB/wQCMAAwDQYJ KoZIhvcNAQELBQADggEBADEQXe74VqOaHu6Nrow9HFe7mv/Zc27rABnV3uWlpxQn LOOObojnlMKmr6+Z5YNhf+uEfO23ngtG6rpAea5ldZKP8We9czvAhFNFGwbIXHb8 0kceiemG1AiA0IKEoatorgwmkdL8fHv2xLcBI94r83tsy0DLU/3XV65T/IKVX/ks tRv/ZmsPpYA5v9LsPXOjL9opU3TKEnYvoiPkbth5UyPcJImfLK0s0nD1EluyOYEJ CVhTyC6hz59g/h8th13KO76zKcifRDNwcla5QIrETSKKyblSXCRtHZeEl2fbjVAl S2NpjykRgJSPLR08Vahft8ZEcsvfEPZf6acXf3yC9qQ= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3rihVuP9GINx0BsyMI54 Cutb7HZR81KuhBwnLejhw70cvRx+aj8Tzq+p/ffVrrToZoZtWmhjoSn5GTE6zC3j PJLP2GtIm13x9JNy1U21wTl/hUvkJtFXseGCAWbFlzMWjVpjbb30I692sAk0lK71 32sPUaoGXzXQu7BBZf7idoLTidVv2HPekPSP9K/zXN/yD7E0Y7mJ2sJsu2Ao9bcS xgsoQ4+NiWwjr62sNSnflpjuTrzZ+DiDfBX76iahj5kN/3nbqc2sLq/OqvEgYOnO E6kDqHvPuBZQL7sGlK6fQ0tHoFNkt/5EhhjJsoUc8MBT4Ji6yj5KviudUkurZftS Wv4pmc/QmZIm6ZC1L8fduwkJ8DWId6GbseOFyD3l+tzj0dXQVXL+Dbx8oGGOQw3E ngdl6LNPmvMJTn91R41kKvFo8fAQCv3g/stYxtyR0SRZsCTH6hZBhYm3xbWWylna ahsxngxIhELyU6HmHcDLV+nQURJNl5+H7s2Ajh430408PQefdz3MeE965nP71f8U 2IMYnLsN+VX0aTJXWWv1rHmHdYJaOTBvyjYaSh/jt/PqqxV4DlWzGUvbDbA6D+3m T016d5Hkt6wnBThfn6BAj8rTFZknwB6qV+HqaEXmpzSNpSE+OhXxkZbGSKtPrU7w qb9G84lAk4lt5n8dVnu/rAsCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4141713851498029738319215632563044683 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Het Nederlands Kanker Instituut-Antoni van Leeuwenhoek Ziekenhuis' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TENALEA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tenalea.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908623270722123338295575803323467376341353570768173632253032338408642691766745108949522105028277481470511711283502850848123476194070083468600030791272409657903502031659173794666606983075411382849151039518650997917002032627484057194981223585060938294820080210877041699850861033217088918622923476719735909711765644685033037606828972935256313689117745272949135920874719740390281349749626666845767889080147561942432800459331190472740948943557024412060677348554936249630896258532755398224432992219163826881798872308944393746259665488511835434875434331403200995453379648046178289604110734320584556959377166211864516920439337655843452452973849613267636898032585007918545314956796078707800861963513719448387344453031683982804900203451784879616542398337639155019737680843833598746263302464750883453843314952274544743714532952625307232501785892093294739029007085026502322958260325235089872627056125906576101928006563789991100454428366091888434957274458823765694333794996136790220230886250171455496363258206220373330462558849762744728591836343280813110984550437629132422577304796826795310423711950974983609351585335738226518842450868786919155831901246894741551303519604884116533202617764108599744627901170758059342466479208252183420094952483851 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 35f1f8f931c9f17b152b43243b8587628ff08b4c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdd.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdt.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sda.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsg1.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsg2.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsg3.tenalea.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evs.tenalea.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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