liferay-decide.global.garrservices.it

- Consortium GARR -

Issued by TERENA eScience SSL CA 3

About this certificate

This digital certificate with serial number 04:ec:df:91:9c:7f:06:e7:00:6f:fe:53:e9:18:d2:04 was issued on by TERENA.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Consortium GARR

Organization: Consortium GARR
State / Province: Italy
Locality: Rome
Country: IT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:df:91:9c:7f:06:e7:00:6f:fe:53:e9:18:d2:04
Serial Number (int): 6546828555612289409431106905519477252
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 32:a9:df:f4:9e:49:95:be:00:ef:fe:2a:39:c7:c8:75:91:a0:a0:39
AuthorityKeyId: 29:aa:1b:6e:30:f9:30:67:63:a5:87:26:0c:ac:f1:81:9c:69:74:49

Fingerprint (sha1): b4:36:51:3a:39:db:c5:1c:64:be:9b:7e:1c:40:ad:fc:84:43:d2:b2
Fingerprint (sha256): 73:41:33:fe:6e:b2:69:b6:6b:a4:f3:4a:94:fa:66:bc:3b:0d:c2:1c:5b:f4:1c:62:17:9b:9c:3b:b1:37:15:4d

Issuing Certificate URL: http://cacerts.digicert.com/TERENAeScienceSSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENAeScienceSSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENAeScienceSSLCA3.crl

Check the revocation status for certificate liferay-decide.global.garrservices.it

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liferay-decide.global.garrservices.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

liferay-decide.global.garrservices.it
applications.eu-decide.eu
ip-90-147-157-149.pa1.garrservices.it

Other certificates including the domain name garrservices.it

(limited to 100 certificates)
aarc-tut-sp.pa1.garrservices.it
aarc-tut-1.pa1.garrservices.it
geantsrv44.ct1.garrservices.it
geantsrv25.ct1.garrservices.it
geantsrv800.ct1.garrservices.it
git.garr.it
comanage.idem.garrservices.it
cloud.garr.it
demo-idp.ct1.garrservices.it
ba1-r2-idrac02.ba1.garrservices.it
wiki.idem.garr.it
speedtest.ba1.garrservices.it
aarc-tut-5.pa1.garrservices.it
git.garr.it
comanage.idem.garrservices.it
cidp-api-server.pa1.garrservices.it
ip-90-147-189-62.pa1.garrservices.it
geantsrv100.ct1.garrservices.it
geantsrv13.ct1.garrservices.it
ip-90-147-167-221.ct1.garrservices.it
geantsrv14.ct1.garrservices.it
www.support.garr.it
aarc-tut-12.pa1.garrservices.it
vpn.ba1.garrservices.it
idgw1.pa1.garrservices.it
filesender-ng.cs.garrservices.it
ba1-r1-idrac05.ba1.garrservices.it
liferay-decide.global.garrservices.it
geantsrv8.ct1.garrservices.it
nagios.cloud.garr.it
cs-r1-idrac14.cs.garrservices.it
aarc-tut-10.pa1.garrservices.it
www.cloud.garrservices.it
portal-eiscat-aarc.pa1.garrservices.it
keystone.cloud.garr.it
dashboard.cloud.garrservices.it
wiki.idem.garr.it
aarc-tut-7.pa1.garrservices.it
aarc-tut-idp.pa1.garrservices.it
cloud.garr.it
e3d-mp-ds.pa1.garrservices.it
geantsrv39.ct1.garrservices.it
wiki.idem.garrservices.it
ba1-r1-idrac10.ba1.garrservices.it
geantsvr12.ct1.garrservices.it
gitlab.global.garrservices.it
ip-90-147-167-221.ct1.garrservices.it
geantsrv42.ct1.garrservices.it
geantsrv32.ct1.garrservices.it
ip-90-147-189-68.pa1.garrservices.it
piwik.global.garrservices.it
ip-90-147-167-134.ct1.garrservices.it
aarc-tut-6.pa1.garrservices.it
git.garr.it
filesender2.cs.garrservices.it
geantsrv45.ct1.garrservices.it
openstack.cs.garrservices.it
ba1-r3-idrac12.ba1.garrservices.it
geantsrv43.ct1.garrservices.it
ba1-r1-idrac02.ba1.garrservices.it
geantsrv14.ct1.garrservices.it
mon.ba1.garrservices.it
geantsrv500.ct1.garrservices.it
aarc-tut-17.pa1.garrservices.it
glance.cloud.garr.it
aarc-tut-4.pa1.garrservices.it
keystone-devel.cloud.garr.it
www.support.garr.it
ba1-r2-idrac12.ba1.garrservices.it
geantsvr15.ct1.garrservices.it
ba1-r3-idrac02.ba1.garrservices.it
idp-csd.pa1.garrservices.it
filesender-ng.cs.garrservices.it
filesender2.cs.garrservices.it
daas-playground.cloud.garr.it
geantsrv15.ct1.garrservices.it
dashboard-devel.cloud.garr.it
ip-90-147-167-221.ct1.garrservices.it
aarc-tut-13.pa1.garrservices.it
speedtest.ct1.garrservices.it
ba1-r3-idrac16.ba1.garrservices.it
ba1-r3-idrac01.ba1.garrservices.it
signup-dev.cloud.garr.it
aarc-tut-9.pa1.garrservices.it
geantsrv36.ct1.garrservices.it
keystone-devel.cloud.garr.it
liferay-decide.global.garrservices.it
dashboard.cloud.garr.it
keystone.cloud.garrservices.it
ba1-r2-idrac04.ba1.garrservices.it
ip-90-147-166-216.ct1.garrservices.it
ip-90-147-167-221.ct1.garrservices.it
ip-90-147-189-61.pa1.garrservices.it
git.garr.it
aarc-tut-13.pa1.garrservices.it
aarc-tut-8.pa1.garrservices.it
www.support.garr.it
geantsrv30.ct1.garrservices.it
geantsrv9.ct1.garrservices.it
ip-90-147-188-207.pa1.garrservices.it

Certificate

The complete raw certificate details for liferay-decide.global.garrservices.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0pvW8mOTITY8vYUpJ9l
OoRgwwiJwvMBl7lo1URhzbPH/eojtrgToF/8cg316NBLor42dXyYNyXNDZM+riNa
UfY2Rr5izh9O14OWll2WiYr/kotXelPB97Zz4AcZeDnBBbaeHUcUScMoLnNyvPZR
4q5PAdQkSJpWscH4hwruuDxgxijB5fV1ihHGsb6IMDJeUfNy1uENaaXOYOfxKWyo
1MpAiZLpH2xqfQqrUVJrQbKnxSW8lyLeeD7D073vj1WVb38o1AVTDGM4372JmyEN
WERlWxaETwt7OD5lZd1lGwNiVmOfwtsItgVbxnv9ume2v0yXjZt480l9yM08ol4M
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6546828555612289409431106905519477252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA eScience SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'terena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'tcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Italy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rome'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Consortium GARR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liferay-decide.global.garrservices.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20613548973187440758041513390412313655383659919183504827921327759277388723065767432928838309011694774986520873651067946591922116909024452481059240633156168893909669938570386770302450722150748296250546051355565141967581882562264257683102211178363714362360745290043171185455198581206965043663846726103065605343305885922620856757625366311920446409878223304292434353516716436079630062545817675967202967118516988162822192283833767311660040701606880058257608590794922803774006471010788580051901700113658240925507297865604270458677017233970594833266526820801490874492748216476221974929490755479067090647093874552081756327029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 29aa1b6e30f9306763a587260cacf1819c697449
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32a9dff49e4995be00effe2a39c7c87591a0a039
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liferay-decide.global.garrservices.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applications.eu-decide.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-90-147-157-149.pa1.garrservices.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENAeScienceSSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENAeScienceSSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.31.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENAeScienceSSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c98cabfdb2a8e67edd8fbc24e0f88d1102841626f370ffe590036805a0bdaff94e2bb282502743f98e5b21507d321583aedc50e11154500e602b374affd98badf542dfc29b8cf0883a4bb42a13d0c6ef6fd8ee697a0556feb50a1d97efc533f76de036e11e370c54db47978a402ae35c81bfdd13dda8d248317f21217b59c0e17544041b71a9ef1010ebc34e1bd79fdff7f16b2228102504f42ac7ac634c3642b53d430da2e7305243d432b1819327a363b618ec549bab96de862d695a5128a0c3f1f1239aae314cc3047d92df4a349f9d6b97e80574c46116af9c28fcbabd7a523185d32758639f142ac6dc513f4db1a28b1400d507a2c8e783dc5130ba353a