qlikview.onderwijsgroeptilburg.nl

- Onderwijsgroep Tilburg -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 04:84:41:1e:f0:38:d5:ed:93:ca:80:3b:db:64:7c:f7 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Onderwijsgroep Tilburg

Organization: Onderwijsgroep Tilburg
Organization unit: ICT Diensten
Locality: Tilburg
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:41:1e:f0:38:d5:ed:93:ca:80:3b:db:64:7c:f7
Serial Number (int): 6003615976280485974698835828998962423
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2d:1d:92:af:e1:09:a5:a9:2a:b3:a0:2d:43:ef:32:1b:53:4d:d3:c6
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): b7:f1:91:30:e0:4e:94:82:59:7d:b2:72:a9:d6:5e:89:e3:53:bc:f1
Fingerprint (sha256): 6d:f3:40:ca:fb:8c:81:1e:e5:2e:0f:ba:62:f7:3c:f5:ca:a8:be:15:fb:07:bc:b8:50:d3:08:19:ed:06:4f:20

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate qlikview.onderwijsgroeptilburg.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qlikview.onderwijsgroeptilburg.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qlikview.onderwijsgroeptilburg.nl

Other certificates including the domain name onderwijsgroeptilburg.nl

(limited to 100 certificates)
mediawiki.onderwijsgroeptilburg.nl
verzuimloket.onderwijsgroeptilburg.nl
topdesk.onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
onedrive.onderwijsgroeptilburg.nl
centreon01.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
onedrive.onderwijsgroeptilburg.nl
pcoip-mc2.onderwijsgroeptilburg.nl
myprint.onderwijsgroeptilburg.nl
qlikview.onderwijsgroeptilburg.nl
satosa.onderwijsgroeptilburg.nl
*.onderwijsgroeptilburg.nl
topdesk-test.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
rsng.onderwijsgroeptilburg.nl
skypepool001.onderwijsgroeptilburg.nl
mijn.onderwijsgroeptilburg.nl
salto.onderwijsgroeptilburg.nl
myprint.onderwijsgroeptilburg.nl
rswp01.onderwijsgroeptilburg.nl
id.onderwijsgroeptilburg.nl
webmail.onderwijsgroeptilburg.nl
iportal.onderwijsgroeptilburg.nl
webmail.onderwijsgroeptilburg.nl
pcoip-mc2.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
iportal.onderwijsgroeptilburg.nl
ondertekenen.onderwijsgroeptilburg.nl
17-21.onderwijsgroeptilburg.nl
skypeedge01.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
rsng.onderwijsgroeptilburg.nl
testsite.onderwijsgroeptilburg.nl
ondertekenen.onderwijsgroeptilburg.nl
salto.onderwijsgroeptilburg.nl
www.onderwijsgroeptilburg.nl
ondertekenen.onderwijsgroeptilburg.nl
sharepoint.onderwijsgroeptilburg.nl
prime01.onderwijsgroeptilburg.nl
ict.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
iportal.onderwijsgroeptilburg.nl
prime01.onderwijsgroeptilburg.nl
digitaalarchiefproductie.onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
satosa.onderwijsgroeptilburg.nl
testsite.onderwijsgroeptilburg.nl
onedrive.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
sip.onderwijsgroeptilburg.nl
skypepool001.onderwijsgroeptilburg.nl
qlikview.onderwijsgroeptilburg.nl
auth.onderwijsgroeptilburg.nl
sharepoint.onderwijsgroeptilburg.nl
topdesk.onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
ict.onderwijsgroeptilburg.nl
*.onderwijsgroeptilburg.nl
sharepoint.onderwijsgroeptilburg.nl
nagios.onderwijsgroeptilburg.nl
onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
sharepoint.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
myprint.onderwijsgroeptilburg.nl
webmail.onderwijsgroeptilburg.nl
digitaalarchiefproductie.onderwijsgroeptilburg.nl
17-21.onderwijsgroeptilburg.nl
qlikview.onderwijsgroeptilburg.nl
17-21.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
rsng-test.onderwijsgroeptilburg.nl
skype-a365-01.onderwijsgroeptilburg.nl
idtst.onderwijsgroeptilburg.nl
webuntis.onderwijsgroeptilburg.nl
werkenbij.onderwijsgroeptilburg.nl
skypepool01.onderwijsgroeptilburg.nl
rsng-test.onderwijsgroeptilburg.nl
onderwijsgroeptilburg.nl
idtst.onderwijsgroeptilburg.nl
ondertekenentst.onderwijsgroeptilburg.nl
id.onderwijsgroeptilburg.nl
onderwijsgroeptilburg.nl
mavim.onderwijsgroeptilburg.nl
desktop.onderwijsgroeptilburg.nl
sip.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
wayf.onderwijsgroeptilburg.nl
ondertekenen.onderwijsgroeptilburg.nl
satosa.onderwijsgroeptilburg.nl
mediawiki.onderwijsgroeptilburg.nl
skype-a365-01.onderwijsgroeptilburg.nl
ondertekenentst.onderwijsgroeptilburg.nl

Certificate

The complete raw certificate details for qlikview.onderwijsgroeptilburg.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8XUF1i0xPTumqoT663Z
+Dy9QXjZUUembwGYB/ucO4H3MIOSEVZMZQrFksYXqgr051qMVWdYFm1Hton4IIlC
v6cmc8scFNbQH+RMdZ/qWVXSV9FubTMPAzO6DhtabH07pgJTKr6QEIIlJgNkGqJe
hHcWKbasJHJ9WZuPmauWvV+Lm/Hv09aT8GnWocpxdaUbXdk4Nm9az71P3pOAP3ik
HBcNOTC17CSqN5JQxvzBcGcZYyOiGoaDVNz5iYTqguPz8/jBE4UCbp5/FyVwAu+F
mrUBFbna2cwexFxOuU2oRRLKt6fVW2tHfwxed8G2dvaiIqCgCk0Rw+nMcSE/74c1
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6003615976280485974698835828998962423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tilburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Onderwijsgroep Tilburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT Diensten'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qlikview.onderwijsgroeptilburg.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21179349789275842140876724775082564019561598044383347469243492987823057934632175586789093367577046119640254382342407161445841444845057329874273842262774669627099800801063074105125312932397573858408208469303239664801678759776371455738617783415235141825001124678562019185401461550817796045504906796504116953136044519661251288195948506069038474496854945443454424088583668410858401412504307894858047852067195443235102091938315889699108066485227193634868790161941905777505241307844577399416461617636090970636275738045348156298407276265813159518980793456587830536444960715912052129021101513043162052580320796752717493515703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d1d92afe109a5a92ab3a02d43ef321b534dd3c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qlikview.onderwijsgroeptilburg.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000169ece864fa000004030047304502200d20a32ab3b6c159d1829c87a9d041afb467d2f34ead2c15a5936d82d84ec6a3022100f6765d5c386e44f6caf36ad362c117781cd4efe4dc8e54ea9617f4bb979a46180075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169ece8660a00000403004630440220738087407f67db0c98639a865a515a73788704e32de6f4a2514900097d7e495c022012583733799c3f5c1ea7e3aa21990d6ecbfc8808a45365ba6ab0b02005f3b739
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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