www.ngu.no

Issued by TERENA SSL CA 3

About this certificate


This digital certificate with serial number 08:2c:d4:7a:52:20:e0:32:ad:19:a9:43:bf:bd:69:90 was issued on by TERENA .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Norges Geologiske Undersøkelse

Organization: Norges Geologiske Undersøkelse
Organization unit: Department of IT and Geomatics
State / Province: Sør Trøndelag
Locality: Trondheim
Country: NO

TERENA

Organization: TERENA
State / Province: Sør Trøndelag
Locality: Trondheim
Country: NO

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 08:2c:d4:7a:52:20:e0:32:ad:19:a9:43:bf:bd:69:90
Serial Number (int): 10866594590144175469745378556815174032
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ba:ce:fb:6b:06:02:53:e3:a7:74:a3:f7:b4:44:9c:02:12:db:cd:6b
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 5d:a4:6f:84:a5:29:0c:46:95:1f:cb:0a:72:82:2b:52:32:6a:00:08
Fingerprint (sha256): 6f:ab:c1:4e:2a:a6:13:a8:04:36:eb:44:68:cd:fd:ac:70:ff:28:9b:ae:a1:2c:78:15:7f:fe:c4:00:82:7c:4d

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for the current certificate on www.ngu.no
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ngu.no
ngu.no

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIQCCzUelIg4DKtGalDv71pkDANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0xNTA5MDMwMDAwMDBaFw0xODA5MDcxMjAwMDBaMIGjMQswCQYDVQQG EwJOTzEYMBYGA1UECAwPU8O4ciBUcsO4bmRlbGFnMRIwEAYDVQQHEwlUcm9uZGhl aW0xKDAmBgNVBAoMH05vcmdlcyBHZW9sb2dpc2tlIFVuZGVyc8O4a2Vsc2UxJzAl BgNVBAsTHkRlcGFydG1lbnQgb2YgSVQgYW5kIEdlb21hdGljczETMBEGA1UEAxMK d3d3Lm5ndS5ubzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMDEltZc 0wfLKjqiI/3Gyi5hD64irMSPgIeP0/RUGrGL4/Z/qGcDx4Za4nmmDuFIhT7UNjSw jIGGwVVoN8ZL+sGH7FsmTTIP4fEWewnfS0aebSyG1dSqPkEjsennHdDiLpXEI1y3 7vjup31z0MT0IGrBV05mWYD3IpWjWKoh8vAr0RWnqAMi6HaGP4ckJVnsbGUiUhhL fruZ+rI4/PiIOxBSz7vSAxDPuRXpsfADIHqtzjPKNagfzxS6AxqkWEJaDwl5Ic7E SKdUU1e+y3Kfsw5pp9wL4527+Z2ewpwTPO2VAyHcLG8jlhFgJrk3B6P50tCFufmy xqJyZvkI4/MWg660evE7V9OdBUbGuAE1pf65Fk3S2GjBhVxRobHMer23qHD8/jMi S+Y/GknA5NeGa/E6iwU2WAKS3mdlmwHh5Li1YYdhmXQp+GSWdFJn3DWqDPrzbJyE Vj8mcoGRKqZLTYPlaZSF1zIid9n//41/o+tnvaj88n+f/7siH9jLEvr9144bS+My h/23uMq5lrtaseEcC1qJmwFxSl37e6lZr9yQUtvXQXkI9aa9trpggXQNGwyAm6II vpp/llnAJ0vgHRRU4QuuD3d4Ru1Hk7Hma8KrxUoGyFR+J742FwrnKDekqvvwRUyb 2/uidjru8pQkZqKc1XLgU68EdYISXMyfLxXVAgMBAAGjggHBMIIBvTAfBgNVHSME GDAWgBRn/YggFCeYxwnSJRm76VERY3VQYjAdBgNVHQ4EFgQUus77awYCU+OndKP3 tEScAhLbzWswHQYDVR0RBBYwFIIKd3d3Lm5ndS5ub4IGbmd1Lm5vMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQw YjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5j cmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMu Y3JsMEIGA1UdIAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwbgYIKwYBBQUHAQEEYjBgMCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOAYIKwYBBQUHMAKGLGh0dHA6 Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3J0MAwGA1UdEwEB /wQCMAAwDQYJKoZIhvcNAQELBQADggEBAG/aUh2dJkt8SHZw4wnipKm1tZN+l1Wv TZvsBJHt4gbaQYUCePzeBdlGv/cvZCRVMt+G1GB2jYjJ3oZ2zc3l4tJDMjyqTkLf xQvcwM/RWMr4QyzWGmW9hDZiyM9fFXaX4kUFzHxMJlGukWmldj4MGVRkOny31MTF xP6dgdG+g7j3JOGPRAR3+QB8ExGyZxoToH1NSi4LjLuHw5cEsDPjy2L+OzG6z+bx 3/acjgab1Cnzt60j+OspDRVGS2vYqiwLiC+wvn/rYKhGmf7R7vW1NabnriAKW3lp YLHWUrb51Ui1/vTalpVje1wSBHQmnFasSGd+64GWqTgDMhqix4FXeow= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwMSW1lzTB8sqOqIj/cbK LmEPriKsxI+Ah4/T9FQasYvj9n+oZwPHhlrieaYO4UiFPtQ2NLCMgYbBVWg3xkv6 wYfsWyZNMg/h8RZ7Cd9LRp5tLIbV1Ko+QSOx6ecd0OIulcQjXLfu+O6nfXPQxPQg asFXTmZZgPcilaNYqiHy8CvRFaeoAyLodoY/hyQlWexsZSJSGEt+u5n6sjj8+Ig7 EFLPu9IDEM+5Femx8AMgeq3OM8o1qB/PFLoDGqRYQloPCXkhzsRIp1RTV77Lcp+z Dmmn3Avjnbv5nZ7CnBM87ZUDIdwsbyOWEWAmuTcHo/nS0IW5+bLGonJm+Qjj8xaD rrR68TtX050FRsa4ATWl/rkWTdLYaMGFXFGhscx6vbeocPz+MyJL5j8aScDk14Zr 8TqLBTZYApLeZ2WbAeHkuLVhh2GZdCn4ZJZ0UmfcNaoM+vNsnIRWPyZygZEqpktN g+VplIXXMiJ32f//jX+j62e9qPzyf5//uyIf2MsS+v3XjhtL4zKH/be4yrmWu1qx 4RwLWombAXFKXft7qVmv3JBS29dBeQj1pr22umCBdA0bDICbogi+mn+WWcAnS+Ad FFThC64Pd3hG7UeTseZrwqvFSgbIVH4nvjYXCucoN6Sq+/BFTJvb+6J2Ou7ylCRm opzVcuBTrwR1ghJczJ8vFdUCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10866594590144175469745378556815174032 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sør Trøndelag' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trondheim' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Norges Geologiske Undersøkelse' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of IT and Geomatics' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ngu.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786424528239322979813396927839493687249267267052197875742542421592711410277993668347918214417418701201716349844606010226607928321578578407487278305084557963169309614328058339974912173373376195208419132850203201171696541428528443723974373080286026424223149866440454208699170158969177528500115263676613690355348158383119940625139094264297293620767926925409182922902047614723285986799041764153713834923834593834627723948421608954943651795204595222503243644638526897511352044988946406648786819046095378376871873218323418722000566302610996989195025061249679825625572566004403634914526138820740638445657692013973688784021145922109143162186771934216277267653228424502535743776873033907447959973451674160480233365678166446869428771868476459103353024631591912839971849245577872364460801855531743072668338587030335300580758341014705544107588603601336847378707185743533974632958307684342622288086002661135418368139054270882578938600648168666416631410841831126901830806865382206642818481694915640578042934859300268498427044459732930625573399651828254698973072116387220039833639612808461385758098876695825400645760615538297390941184139303772616010146603202730377094006210772410245695185505821660479753027484164527088140022667103670204987071206869 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bacefb6b060253e3a774a3f7b4449c0212dbcd6b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngu.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngu.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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