turnitin-service.sin-online.nl

- Erasmus Universiteit Rotterdam -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 08:7e:5b:98:30:af:d1:18:fe:73:9c:c9:3d:60:84:ea was issued on by TERENA.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Erasmus Universiteit Rotterdam

Organization: Erasmus Universiteit Rotterdam
Locality: Rotterdam
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:7e:5b:98:30:af:d1:18:fe:73:9c:c9:3d:60:84:ea
Serial Number (int): 11289911127477179660122264263601456362
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b0:26:40:28:9f:46:e1:b0:54:d2:ad:a1:67:75:1d:62:02:3b:fe:e0
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): df:92:82:5c:d3:df:f4:7e:fd:15:be:9a:15:13:f9:05:d2:76:be:07
Fingerprint (sha256): 8d:c1:9c:24:c8:5f:55:be:b4:0c:03:df:a6:bb:6e:58:95:7a:19:78:94:53:9a:7a:41:56:62:0d:a1:0a:77:20

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate turnitin-service.sin-online.nl

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turnitin-service.sin-online.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turnitin-service.sin-online.nl
turnitin-service-test.sin-online.nl
turnitin-service-accept.sin-online.nl

Other certificates including the domain name sin-online.nl

(limited to 100 certificates)
db-bundle.sin-online.nl
sin-online-service-bundle.service.eur.nl
sin-app03.app.eur.nl
exam.sin-online.nl
hobbes.frg.eur.nl
eur.sin-online.nl
rsm.sin-online.nl
lucretius.frg.eur.nl
sin-service-agglomerate-accept.service.eur.nl
sin-online-service-bundle.service.eur.nl
epi.frg.eur.nl
sin-online-service-bundle.service.eur.nl
ese.sin-online.nl
fwb.sin-online.nl
emc.sin-online.nl
sin-online-service-bundle-accept.service.eur.nl
sin-dev-bundle.sin-online.nl
sin-online-service-bundle.service.eur.nl
www.sin-online.nl
emc.sin-online.nl
bmg.sin-online.nl
sin-service-agglomerate.service.eur.nl
lucretius.frg.eur.nl
sin-online-service-bundle-test.service.eur.nl
sin-online-service-bundle.service.eur.nl
sin-online-service-bundle.service.eur.nl
exchange.eur.nl
rsm.sin-online.nl
exchange.eur.nl
bsk.sin-online.nl
exchange.eur.nl
psy.sin-online.nl
esl.sin-online.nl
epicurus.frg.eur.nl
bmg.sin-online.nl
fhk.sin-online.nl
turnitin-service.sin-online.nl
sin-online-service-bundle.service.eur.nl
emc.sin-online.nl
www.sin-online.nl
sin-online-service-bundle-prod.service.eur.nl
bmg.sin-online.nl
queue-test.sin-online.nl
eshcc.sin-online.nl
sin-service-agglomerate2.service.eur.nl
sin-online-service-bundle.service.eur.nl
sin-online-service-bundle.service.eur.nl
ese.sin-online.nl
fhk.sin-online.nl
sin-online-service-bundle.service.eur.nl
www.sin-online.nl
sin-online-service-bundle.service.eur.nl
exchange.eur.nl
sin-online-service-bundle-prod.service.eur.nl
sin-online-service-bundle.service.eur.nl
exchange.eur.nl
sin-online-service-bundle-prod.service.eur.nl
sin-online-service-bundle-prod.service.eur.nl
exchange.eur.nl
sin-online-service-bundle.service.eur.nl
sin-app03.app.eur.nl
frg.sin-online.nl
t-sin-app03.app.eur.nl
exchange.eur.nl
fsw.sin-online.nl
psy.sin-online.nl
exchange.eur.nl
sin-online-service-bundle.service.eur.nl
sin-online-service-bundle-prod.service.eur.nl
exchange.eur.nl

Certificate

The complete raw certificate details for turnitin-service.sin-online.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGmzCCBYOgAwIBAgIQCH5bmDCv0Rj+c5zJPWCE6jANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xODA2MDEwMDAwMDBaFw0yMDA2MDUxMjAwMDBaMHMxCzAJBgNVBAYT
Ak5MMRIwEAYDVQQHEwlSb3R0ZXJkYW0xJzAlBgNVBAoTHkVyYXNtdXMgVW5pdmVy
c2l0ZWl0IFJvdHRlcmRhbTEnMCUGA1UEAxMedHVybml0aW4tc2VydmljZS5zaW4t
b25saW5lLm5sMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw9WSyfxP
OfUwIKznQTpVL3XcjFRlArR1tcsLjiOf1JtJuwqcDmzllz2CpTj0GwQWNKf9xYmP
8FfZYYsYUEPYbrNYp3+AscprK4s3YuOkhAN7eN5B/KvwMUu6bfNMtV5liL+WidpK
5T0I/bkpw3eavMU3xFQ+mwysQ1IDBrf2GhelFEQoJpqvjLmAW7LxpTw0J5lHtCnI
K8s2f5Tj+0mzztgwDLjDX0JAKvJrunGV1zzbyJUqRe6B1x7U6KjnyU7MVxg3Q8hb
S6uV26nlzeNZkO1rempxzgXBKeNodfywKVauZzalKJ3N4bDfNZAYL7BsAsOkZd5A
fCVAEg7mLWZAGJwgrbB7SBONMFxtDIKj2GVaG3N1+2vzwAyKyjkjT1eLcJpw3tSq
a3VP5BcX/DT65ZJVCwwJrMNF45vclGxyPIqT026hAJURxeU8xcxOaAB8apcNhP7o
wi4ykkOH/+DfB/PDJSq3yRyCKqqvm8imdUwlvnVBCHaA2Hri5vgGpoSMjTRwCxF/
w2HQwVdHPj8/baMCzg7uHCQzQTQa1Tk6w/PW6PEmuP9tXxI5p+zmkjy+vrwnaeK1
WElj6nzjFwCIa8aua4X0wp27SJupmPON8MuwqQo+l6qRi3PVSlVMZPjU5u7n2uyQ
4vuCvSgFB/2+W/CON95bkBGqnHni/yBS7BsCAwEAAaOCAjgwggI0MB8GA1UdIwQY
MBaAFGf9iCAUJ5jHCdIlGbvpURFjdVBiMB0GA1UdDgQWBBSwJkAon0bhsFTSraFn
dR1iAjv+4DB1BgNVHREEbjBsgh50dXJuaXRpbi1zZXJ2aWNlLnNpbi1vbmxpbmUu
bmyCI3R1cm5pdGluLXNlcnZpY2UtdGVzdC5zaW4tb25saW5lLm5sgiV0dXJuaXRp
bi1zZXJ2aWNlLWFjY2VwdC5zaW4tb25saW5lLm5sMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4Yp
aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcmwwL6AtoCuG
KWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3JsMEwGA1Ud
IARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG4GCCsGAQUFBwEBBGIwYDAkBggrBgEF
BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDgGCCsGAQUFBzAChixodHRw
Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNydDAMBgNVHRMB
Af8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBx
4Ic9ePeR8MuqlhIGO1a3HVs1JedfAt5Qn2kcqyTSLo6dsbRWf9lu36LEB0NJZvRk
+GqLuzYsoHWGroYYkHG0tp764KTsOWi/ZMkeu5g1sOPimvbbDbgCP3jBbP9suoXi
t7+Te+zA41Un78+fIqaXpQgReacNn5V9byhT+dNty4wdG4DyT42EUpMipuEazRdV
ARQDSA08ovBZOs7R69GXJsAtZGG0vJ0xUux1lO99WPPVi+cedlce63hmsHJQ6+/7
TDQ0GTsyasITAH0M31QsT3YP9DNW6Gv4K0cMk8biUFILx7i/rj7ZOoE0ZnIR/mvV
smhh3YG0N1YPYB85f9jS
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11289911127477179660122264263601456362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erasmus Universiteit Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'turnitin-service.sin-online.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798934122295897162029041504357075742512951819446867358567815231356287793856349833335936390317106311724845794297709788326118342408724191075900315590910702604152511749674485256074522187207763564692448477801295580892192131558829987456278811631322744806472912263316583276348223940071090749128751136715996479541692192443951027796762965442038118629576669490393806855663998792586453660693604680791419523137590103441712891565951923577617079974236546135844504297416109705507440487239309158791043674470255646476330067122678172400048464514150413085280916985902994939490224152451831378457046331543517328436462730434370609182485093602746990080707588220514025589981907447125097186403665722310667178161162662580248628589605597202692601349717946855625910427285888564293232126910573764730258816996987180195581759501218468103557848871597463408958913712660581496541112100694884149931093758613965410317637391601164081297344350297538719880547053512927398424135501861875308390847775588080983480494887204755708849937676133774523534867128815937142883862013429338393493308216855189831875925499938063063232139296701065862553677242754182305307155984375785063669709602671103918392626799337472105928369564804827101754107126029593972744306757054366901037905931291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b02640289f46e1b054d2ada167751d62023bfee0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnitin-service.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnitin-service-test.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnitin-service-accept.sin-online.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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