webmail.lorentz.leidenuniv.nl

Issued by TERENA SSL CA 3

About this certificate


This digital certificate with serial number 03:a3:55:97:0c:2c:8e:02:7d:bd:fe:44:33:a6:6d:1c was issued on by TERENA .

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Leiden University

Organization: Leiden University
Organization unit: Institute Lorentz
State / Province: Zuid Holland
Locality: Leiden
Country: NL

TERENA

Organization: TERENA
State / Province: Zuid Holland
Locality: Leiden
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a3:55:97:0c:2c:8e:02:7d:bd:fe:44:33:a6:6d:1c
Serial Number (int): 4835764347332458043976821963640696092
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 66:5f:c3:42:96:4a:ff:ca:64:e0:e4:c2:4e:58:43:de:26:07:7a:1a
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 07:a8:49:18:bc:af:e9:2d:bb:56:df:0d:d2:d8:db:94:29:0c:92:84
Fingerprint (sha256): 5e:2d:4e:50:4c:30:c7:f7:b5:32:6f:6b:73:cd:ac:cf:00:01:21:02:81:70:8f:ee:83:6a:4e:bf:88:8c:43:c8

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for the current certificate on webmail.lorentz.leidenuniv.nl
11
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.lorentz.leidenuniv.nl
admin.lorentz.leidenuniv.nl
charon.lorentz.leidenuniv.nl
cosmology.lorentz.leidenuniv.nl
lorentz.leidenuniv.nl
mysql.lorentz.leidenuniv.nl
print.lorentz.leidenuniv.nl
printers.lorentz.leidenuniv.nl
ssh2.lorentz.leidenuniv.nl
vg12.lorentz.leidenuniv.nl
www.lorentz.leidenuniv.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHeDCCBmCgAwIBAgIQA6NVlwwsjgJ9vf5EM6ZtHDANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0xNTA0MjEwMDAwMDBaFw0xODA0MjUxMjAwMDBaMIGVMQswCQYDVQQG EwJOTDEVMBMGA1UECBMMWnVpZCBIb2xsYW5kMQ8wDQYDVQQHEwZMZWlkZW4xGjAY BgNVBAoTEUxlaWRlbiBVbml2ZXJzaXR5MRowGAYDVQQLExFJbnN0aXR1dGUgTG9y ZW50ejEmMCQGA1UEAxMdd2VibWFpbC5sb3JlbnR6LmxlaWRlbnVuaXYubmwwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC1vGlFtmDOFg1eMr+1Mqrsh2q2 seDX34/KdThSOR4UWlUOTejDbmueKWYksSvfUy25xypyN2QqL7IOdnBjBqJZMlgj 7mM4EjT117zCGA0u4H6b4Od2F4O4AixV4uNHUzqyG+iXbf5RtsUJhT541hHV1rKI 3muxLMa9E59v+tyoZe6StRTf+z+rp1InsRnmdQhiLNUI/u/DA6dy0Vq1+f9lNHFD V8kY9i+kJ8BoGkasNfy1hEZZ0dpmpY0UtTCyLr29DGJr3GcmUNguKRcCQxpIAKQG ef8PW3Y4xDPBYyIU1uKsqwuSGLr5Dczaz6NltEAvaZaB7VxJ8gE1tnz4zKCts9BB /ez8MtReboF9SZ9hs+rwcYfnOG2PUJ5hUgSN6nOCtUEr5LLVy36PLUL2NRrR2pHo AFbWFxm6zsCgslXQOTT+SQH2AUayVVbu2hOQkwORJdeSc/ahupgbyZYTvGx3PFNs qhnl79rKh7fdxHjhSn6cX18AoG4okHI12Da8lyxB3yfJQgECBU5ZdA88tQJy5u8W X3tpjwnA8FNA4A0hZxRHxKF/9b4JkZ+8W87ugWtPhQct9IgMq5A8/aCyNSp5ajZp vybZS5pWjpVE3hLTGbPfDzMENGgvAt5tcfUJUbJsfo2FWfYcHO3N3gPrygEkQnQq fGLAGrPU0SumowWTJwIDAQABo4IC8jCCAu4wHwYDVR0jBBgwFoAUZ/2IIBQnmMcJ 0iUZu+lREWN1UGIwHQYDVR0OBBYEFGZfw0KWSv/KZODkwk5YQ94mB3oaMIIBTAYD VR0RBIIBQzCCAT+CHXdlYm1haWwubG9yZW50ei5sZWlkZW51bml2Lm5sghthZG1p bi5sb3JlbnR6LmxlaWRlbnVuaXYubmyCHGNoYXJvbi5sb3JlbnR6LmxlaWRlbnVu aXYubmyCH2Nvc21vbG9neS5sb3JlbnR6LmxlaWRlbnVuaXYubmyCFWxvcmVudHou bGVpZGVudW5pdi5ubIIbbXlzcWwubG9yZW50ei5sZWlkZW51bml2Lm5sghtwcmlu dC5sb3JlbnR6LmxlaWRlbnVuaXYubmyCHnByaW50ZXJzLmxvcmVudHoubGVpZGVu dW5pdi5ubIIac3NoMi5sb3JlbnR6LmxlaWRlbnVuaXYubmyCGnZnMTIubG9yZW50 ei5sZWlkZW51bml2Lm5sghl3d3cubG9yZW50ei5sZWlkZW51bml2Lm5sMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0f BGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENB My5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xD QTMuY3JsMEIGA1UdIAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0 dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwbgYIKwYBBQUHAQEEYjBgMCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOAYIKwYBBQUHMAKGLGh0 dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3J0MAwGA1Ud EwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAAPFZWnnXi5bEC6n1ipptJ4FoTz9 uwwHvy2j7t+gFG5NONAGZtxGjQavIJMst4U1J4pBjoYt1s+Lbsec+MHBMhGgFjag 9kK4h2MlqFsDl3RTNVpwO0QJ82CuA29XWobHi2wnIBToYvy7RujQRr5mPlkyL6a5 ySxXWzHbvo7pRi4JdGgZXZiDcKB2ehx4qgrTFeL9QTUJx+5rkXyDVP5G1mCLbiDo sK+FH2XV7WdzwEAK9zdzDfRGNHwgPq20yoJVhKSphQ3l5LtPCHvwzXchDJjXLdXc 0FbN0QmLEmDQvE4bwYQ4njTitv1D51QNaQORZyDrtB7XEjOlA6xJUQ+Ju3Q= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtbxpRbZgzhYNXjK/tTKq 7IdqtrHg19+PynU4UjkeFFpVDk3ow25rnilmJLEr31MtuccqcjdkKi+yDnZwYwai WTJYI+5jOBI09de8whgNLuB+m+DndheDuAIsVeLjR1M6shvol23+UbbFCYU+eNYR 1dayiN5rsSzGvROfb/rcqGXukrUU3/s/q6dSJ7EZ5nUIYizVCP7vwwOnctFatfn/ ZTRxQ1fJGPYvpCfAaBpGrDX8tYRGWdHaZqWNFLUwsi69vQxia9xnJlDYLikXAkMa SACkBnn/D1t2OMQzwWMiFNbirKsLkhi6+Q3M2s+jZbRAL2mWge1cSfIBNbZ8+Myg rbPQQf3s/DLUXm6BfUmfYbPq8HGH5zhtj1CeYVIEjepzgrVBK+Sy1ct+jy1C9jUa 0dqR6ABW1hcZus7AoLJV0Dk0/kkB9gFGslVW7toTkJMDkSXXknP2obqYG8mWE7xs dzxTbKoZ5e/ayoe33cR44Up+nF9fAKBuKJByNdg2vJcsQd8nyUIBAgVOWXQPPLUC cubvFl97aY8JwPBTQOANIWcUR8Shf/W+CZGfvFvO7oFrT4UHLfSIDKuQPP2gsjUq eWo2ab8m2UuaVo6VRN4S0xmz3w8zBDRoLwLebXH1CVGybH6NhVn2HBztzd4D68oB JEJ0KnxiwBqz1NErpqMFkycCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4835764347332458043976821963640696092 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-25 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Institute Lorentz' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.lorentz.leidenuniv.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741418118170735659114908655733938197537615754678324371447334870878601366962711522417801248323683909325026190628116848488590137397830600039296126385847899004784146524988740562443091917046552649874473458965169995346574013150026516766426499949668844940913972707832730044224247466415402377825659273131908435731105205275487225727222382843257797763139021663870054515274181733366038222958720960834740350946714872350691247513011756595192214555747679708864254553001523814107674552670105390114329441020003769091021147664816051226481201717781355675983316524540393324955189503286493530087138521822242464498745898285430042556028943782717723730895373682036765471176808790599946878876038839132148860839675876175767960223443279555114237986708220001562655954635242963160216638084882732578129511781633929978004987579257287773561139661593517211718851729669637949508493779213378308698761761712478029325631282618685736756342788243992959907984692149754181254696271324190590342480744697097856987616582446352660954280480034381018580777968939466218853056083359889888131894972217465877037283206635429091307397527609764033017769596060238735700835699256323409508718568677973211273101955438583570746736969324779816888572665222787839445316244471280026360301851431 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 665fc342964affca64e0e4c24e5843de26077a1a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (323 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charon.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmology.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysql.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printers.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssh2.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg12.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorentz.leidenuniv.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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