wageningenur.nl

Issued by TERENA SSL CA 3

About this certificate


This digital certificate with serial number 0c:0f:7a:f7:9b:48:59:6a:21:5d:1a:d1:39:e8:f7:bd was issued on by TERENA .

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Wageningen University and Research

Organization: Wageningen University and Research
Organization unit: FB-IT
State / Province: Gelderland
Locality: Wageningen
Country: NL

TERENA

Organization: TERENA
State / Province: Gelderland
Locality: Wageningen
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:0f:7a:f7:9b:48:59:6a:21:5d:1a:d1:39:e8:f7:bd
Serial Number (int): 16031114473682440846053442764879230909
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c7:d5:22:9e:00:7a:d2:01:fa:1b:d9:63:eb:3d:92:ed:d1:79:cf:a5
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 5b:95:fd:0f:ff:8e:83:05:c4:4c:eb:a3:ac:c3:14:0c:92:78:9c:6b
Fingerprint (sha256): 7c:59:18:8c:be:a2:11:81:09:6c:e5:40:6a:66:31:2b:f9:26:05:f1:47:15:8c:96:7b:38:4e:9e:74:2d:2e:43

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for the current certificate on wageningenur.nl
11
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

wageningenur.nl
www.wageningenur.nl
redactie.wageningenur.nl
scomp1137be.wurnet.nl
scomp1138be.wurnet.nl
scomp1139be.wurnet.nl
scomp1140be.wurnet.nl
scomp1141be.wurnet.nl
scomp1142be.wurnet.nl
wireless.wur.nl
www.wireless.wur.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIQDA9695tIWWohXRrROej3vTANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMzAeFw0xNTAxMDgwMDAwMDBaFw0xODAxMTIxMjAwMDBaMIGOMQswCQYDVQQG EwJOTDETMBEGA1UECBMKR2VsZGVybGFuZDETMBEGA1UEBxMKV2FnZW5pbmdlbjEr MCkGA1UEChMiV2FnZW5pbmdlbiBVbml2ZXJzaXR5IGFuZCBSZXNlYXJjaDEOMAwG A1UECxMFRkItSVQxGDAWBgNVBAMTD3dhZ2VuaW5nZW51ci5ubDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANOPZVvoB055M2D6ssnmAyt+7r7QSvnCSJwZ 3XKRO/yzps2jYEkPcuiVYirHxaWHjEBtit1+K0tnaUF+DDZCOaWnQO/anpJuLgSQ Y2inUjdarscSWDDe2iwQt240nWpFEhskw5479XDaCfaQ7d1NItcj5i7DG9OZb2Ds nJyZAmSuAUZc3q3es4e9QnP+cJIbOJgBYaQiO2kYhPdA44csN9xDA/9dNW8RVZsX NaEOryxq1dKLLtrVuALk4ZCZvG8F1wtXI8v8+6pMnJTpkLITzGOFP83EX31CP/j6 ZlRaiU96RsLJKkXJeyR2cVEym15OUcxS2JiRJ9DFZwoY4Pv9dWpJ4rANXsEU3my7 tg/ZhSdgewyZMZts/KQnhzTNetMB28N+AxqG9ZL6gQD0nAPmEdiQa4fjFZRVNRnO Elom/vaEP4RAM8MnOTF6K+tTNtqNo7Ysb8RUkxKOYbbQQxMkRDEqFxx30IC1TQsl hjwK3zss73nPwMVFInScfJtumSXEMs5nYykzl/gqKf/0d+bsQhYJMRrUD0IEEN7A z8SHWTiGtTRxJ5E+JqL0HzgEP+3+YdfnDx1b9A12ZTAEJlE8bGcw/cih0t7LuFHF GKpQDttlZ/EkMX4XxaemapGyDkqz1ABReweIm0grEkJffGb4bOro25lQ8hbr9oms Jb4BzzE7AgMBAAGjggKgMIICnDAfBgNVHSMEGDAWgBRn/YggFCeYxwnSJRm76VER Y3VQYjAdBgNVHQ4EFgQUx9UingB60gH6G9lj6z2S7dF5z6UwgfsGA1UdEQSB8zCB 8IIPd2FnZW5pbmdlbnVyLm5sghN3d3cud2FnZW5pbmdlbnVyLm5sghhyZWRhY3Rp ZS53YWdlbmluZ2VudXIubmyCFXNjb21wMTEzN2JlLnd1cm5ldC5ubIIVc2NvbXAx MTM4YmUud3VybmV0Lm5sghVzY29tcDExMzliZS53dXJuZXQubmyCFXNjb21wMTE0 MGJlLnd1cm5ldC5ubIIVc2NvbXAxMTQxYmUud3VybmV0Lm5sghVzY29tcDExNDJi ZS53dXJuZXQubmyCD3dpcmVsZXNzLnd1ci5ubIITd3d3LndpcmVsZXNzLnd1ci5u bDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9URVJF TkFTU0xDQTMuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vVEVS RU5BU1NMQ0EzLmNybDBCBgNVHSAEOzA5MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUF BwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMG4GCCsGAQUFBwEBBGIw YDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDgGCCsGAQUF BzAChixodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNy dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQCyDdwLb6HDia3y+4Ow /uBAS9mMeLqupB7puDqNbSFYxbnQnQoURc9/hW2O0GjlBgT3T0vPOnL0IokOtSjq MjK6gGpSFSUUQ/+O7EzXAcC5ItZ4ntPRF8k1aV9H9PLbOoxCeBIbS5jiWNT0p3fS HQAOsouIX4/zS9Q8hha0eBB2AoddvwVnkPGoSu0k8/DuSnfKhfGbb1avxiuGg6FK URU4LZhOr8XmNWetlLGngiruwiMyctMMnrlPjTTXn86qmN7smHTYzGYhdJ/va0al i3eLrtm1l0PQAEroW3VP6yB4QoDPSX+91aaelFh/8fCG/R3a5f8ea5QrE4T0myO4 nCCy -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA049lW+gHTnkzYPqyyeYD K37uvtBK+cJInBndcpE7/LOmzaNgSQ9y6JViKsfFpYeMQG2K3X4rS2dpQX4MNkI5 padA79qekm4uBJBjaKdSN1quxxJYMN7aLBC3bjSdakUSGyTDnjv1cNoJ9pDt3U0i 1yPmLsMb05lvYOycnJkCZK4BRlzerd6zh71Cc/5wkhs4mAFhpCI7aRiE90Djhyw3 3EMD/101bxFVmxc1oQ6vLGrV0osu2tW4AuThkJm8bwXXC1cjy/z7qkyclOmQshPM Y4U/zcRffUI/+PpmVFqJT3pGwskqRcl7JHZxUTKbXk5RzFLYmJEn0MVnChjg+/11 aknisA1ewRTebLu2D9mFJ2B7DJkxm2z8pCeHNM160wHbw34DGob1kvqBAPScA+YR 2JBrh+MVlFU1Gc4SWib+9oQ/hEAzwyc5MXor61M22o2jtixvxFSTEo5httBDEyRE MSoXHHfQgLVNCyWGPArfOyzvec/AxUUidJx8m26ZJcQyzmdjKTOX+Cop//R35uxC FgkxGtQPQgQQ3sDPxIdZOIa1NHEnkT4movQfOAQ/7f5h1+cPHVv0DXZlMAQmUTxs ZzD9yKHS3su4UcUYqlAO22Vn8SQxfhfFp6ZqkbIOSrPUAFF7B4ibSCsSQl98Zvhs 6ujbmVDyFuv2iawlvgHPMTsCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16031114473682440846053442764879230909 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wageningen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wageningen University and Research' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FB-IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wageningenur.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 863090071672602081422027278565324126519749004218949381563477028509226975658906747034798968041962538689733172202426458673859316617845953668697524936388595648057490352877649335014697466853386027210133963773990535043219696468746076476277311272330709284792623647791964903277813084681669954812441441480463675894085262914514209242570206048237876144292632041981867806337927653078727492060759090172247125783974052519964444379577441619662645553567909828895855689458607008012771031824813850563433853981614224060529031863129837341190174203571769821116617286998628164895763392198844495277448948770911204532765464117594112324348298923134168455428181789219816145375381460470158997126806485067137972686011646196976968095270366666286581391264636158252903594682677954430397611288966546020342650231703834353910043600057257044686959124561272785540531369589571662828934165888877831282745319031077429149000115758114102125301890752186457072433859965540817107294667528037736849000238441680106807348250714736880821627345296172357313466967722367269656927920642866692710900837575963559818821050665885904993225485702730512186287995030887417653163473478329065657757824415422646147278217116462417748814848339207306135837922478651085751105313339190735242473189691 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c7d5229e007ad201fa1bd963eb3d92edd179cfa5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wageningenur.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wageningenur.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redactie.wageningenur.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scomp1137be.wurnet.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scomp1138be.wurnet.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scomp1139be.wurnet.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scomp1140be.wurnet.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scomp1141be.wurnet.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scomp1142be.wurnet.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wireless.wur.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wireless.wur.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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