netpa.estescoimbra.pt

- Instituto Politécnico de Coimbra -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0f:ef:b3:71:cc:e8:49:13:11:5e:09:b4:91:16:0b:c4 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Instituto Politécnico de Coimbra

Organization: Instituto Politécnico de Coimbra
Organization unit: Escola Superior de Tecnologia da Saude de Coimbra
Locality: Coimbra
Country: PT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ef:b3:71:cc:e8:49:13:11:5e:09:b4:91:16:0b:c4
Serial Number (int): 21183018453480737535849752445893086148
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3d:b7:66:71:89:8c:35:7f:08:75:8e:b6:d0:6d:17:c6:5c:e6:fa:8a
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 79:c3:c8:d5:3d:2a:0a:34:7a:76:51:9b:c5:59:53:24:5e:bc:c3:f4
Fingerprint (sha256): fc:8d:61:e9:40:31:29:b2:d0:2c:3a:17:6f:36:42:02:df:8a:0c:a7:3f:36:a4:c8:71:47:c4:84:19:17:da:2b

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate netpa.estescoimbra.pt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netpa.estescoimbra.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netpa.estescoimbra.pt

Other certificates including the domain name estescoimbra.pt

(limited to 100 certificates)
mail.estescoimbra.pt
subam2020.estescoimbra.pt
machform.estescoimbra.pt
netpa.estescoimbra.pt
cl.estescoimbra.pt
radius.estescoimbra.pt
machform.estescoimbra.pt
moodle.estescoimbra.pt
moodle.estescoimbra.pt
nonioouws.estescoimbra.pt
netpa.estescoimbra.pt
annualmeeting.estescoimbra.pt
netpa.estescoimbra.pt
webmail.estescoimbra.pt
machform.estescoimbra.pt
annualmeeting.estescoimbra.pt
subam2020.estescoimbra.pt
fiv.estescoimbra.pt
machform.estescoimbra.pt
webmail.estescoimbra.pt
annualmeeting.estescoimbra.pt
lists.estescoimbra.pt
osticket.estescoimbra.pt
webmail.estescoimbra.pt
webmail.estescoimbra.pt
intranet.estescoimbra.pt
idp.estescoimbra.pt
sachelp.estescoimbra.pt
webmail.estescoimbra.pt
webmail.estescoimbra.pt
joemed.estescoimbra.pt
annualmeeting.estescoimbra.pt
of.estescoimbra.pt
safeq.estescoimbra.pt
idp.estescoimbra.pt
idp.estescoimbra.pt
annualmeeting.estescoimbra.pt
moodle.estescoimbra.pt
mail.estescoimbra.pt
biblioteca.estescoimbra.pt
machform.estescoimbra.pt
idp.estescoimbra.pt
webmail.estescoimbra.pt
biblioteca.estescoimbra.pt
netpa.estescoimbra.pt
subam2020.estescoimbra.pt
sgeralhelp.estescoimbra.pt
joemed.estescoimbra.pt
joemed.estescoimbra.pt
moodleant.estescoimbra.pt
subam2020.estescoimbra.pt
biblioteca.estescoimbra.pt
annualmeeting.estescoimbra.pt
netpa.estescoimbra.pt
moodleant.estescoimbra.pt
giahelp.estescoimbra.pt

Certificate

The complete raw certificate details for netpa.estescoimbra.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH6TCCBtGgAwIBAgIQD++zcczoSRMRXgm0kRYLxDANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xODA4MjkwMDAwMDBaFw0yMDA5MDIxMjAwMDBaMIGnMQswCQYDVQQG
EwJQVDEQMA4GA1UEBxMHQ29pbWJyYTEqMCgGA1UECgwhSW5zdGl0dXRvIFBvbGl0
w6ljbmljbyBkZSBDb2ltYnJhMTowOAYDVQQLEzFFc2NvbGEgU3VwZXJpb3IgZGUg
VGVjbm9sb2dpYSBkYSBTYXVkZSBkZSBDb2ltYnJhMR4wHAYDVQQDExVuZXRwYS5l
c3Rlc2NvaW1icmEucHQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDF
PMMJliLtzsWj/Ru8SYQ2IqucDDxpDwU0Qe7pD38JRifw7R/sSUsn/Zboon93YPRF
kCXCGtFMZ9UbTInfSe9iOSmm7izflfb8B0EudsrugY26tECWCvykJsZiy3xCtxrL
939KbWMPHEBC1/JRCi8YIiUU1/SI/DCcw285SylecX3cRIoslInHLtsTcZ/Cn+M/
5MEcnqxICzE3Y6TeSiiQNmo953aA09rSqr5C+LvG1E31WZaH2eh+zN9JF5iNbdb2
lhotR5NNcluO3sjxgfywuxJRS6oWFus6FAEdh9Dwy2DQv3JokFwxEjmw1ozzYjPg
ZlyFOnJjGXcaDRbqWagHUPdMOh41CRZzxUL6evvBqsPssZX5g0qTuWhCRjPxnuVp
WYm5qtx/16Ggo5NrHqCJeXPky0rG3NV1UZQT8/K1veAey3pDDHu7BR3L2fpkv5W2
wPyoNwrjhMbJFS01tbX+nI4RECD17ti9e0nM+Kht2EDrbM6WBXDCN6KXw9R3IBwh
CsWOFuFGthEsTo86XtiHGFkx8swxm6AiXf5dMXjvnXJRUXURGy2PRMFWbuBlpvP/
GnaDxnBidFFua1a+MPwPuok7I9fIgRD2AguHrlQAmIglN63chvSTwR+KYx/UiUbK
KTrYxBlnbJT22lCvZ8KLJVVzZePSIDyMlCMiRsYT7QIDAQABo4IDUTCCA00wHwYD
VR0jBBgwFoAUZ/2IIBQnmMcJ0iUZu+lREWN1UGIwHQYDVR0OBBYEFD23ZnGJjDV/
CHWOttBtF8Zc5vqKMCAGA1UdEQQZMBeCFW5ldHBhLmVzdGVzY29pbWJyYS5wdDAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsG
A1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9URVJFTkFT
U0xDQTMuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vVEVSRU5B
U1NMQ0EzLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB
FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjBuBggrBgEF
BQcBAQRiMGAwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA4
BggrBgEFBQcwAoYsaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL1RFUkVOQVNT
TENBMy5jcnQwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFp
AHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFlhQJGpQAABAMA
RjBEAiBxliyvRs7OZvoLUP8PYPe98KA2sQRIlbhpNstQ4jKvOAIge1UnyhiRFce4
qq+Ryl/mykHTxoWeKPQI/KcQPZt0Mm4AdwCHdb/nWXz4jEOZX73zbv9WjUdWNv9K
tWDBtOr/XqCDDwAAAWWFAkc1AAAEAwBIMEYCIQChbIF885ukAa9Vl8SA6oE/pRSf
sbSReLEyI61N2IHLPAIhAL3KokiMLpI/WPP9bV/SPldIkE2mHiXq2qrS4COMcutU
AHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFlhQJGygAABAMA
SDBGAiEAy/BC1OnLKbs9JE/K/m5A6SCXapYNMPst4AMCrBqaFdICIQCS9TJa2YIp
5ObPyDJhrqaoFVmEo/TSirnDeGJSFqH/MDANBgkqhkiG9w0BAQsFAAOCAQEAsHv2
BnnV1UX9vYdHz/m5xRH3sheqLEsMai8qX/SpDzWmjvgVGffi0RPnKYRew8ufRL9J
GsEf/vFj2zMp3iSPq17YNZ5wSSyBN0SgLGJHe+vtyBYt7tOnRph10Gt0LorQ0GN+
DdcEgiLWPevjmxAfpRbCGtioQnlNbRUisqSbIx7YDPCwzlZ++EHPbDhsIwqM1MXB
QgaeiILVEUZrrhMRdnoxQE1SNQaClXA+5mA10cNptwlQrHgnYyLv1Ku8EVTuz+57
yny749DHd+DqtJmK7pJUc+mvU8AEMijHUAQVs3Ts3if/3N4+8ZGy8bnSs7TS6OFY
/hwpbmto+Y44i4E8KA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21183018453480737535849752445893086148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coimbra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Instituto Politécnico de Coimbra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Escola Superior de Tecnologia da Saude de Coimbra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netpa.estescoimbra.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804658189143023755219548178857332696882980271623955345467609556936612090195254726788426797000742882708087051047225458082779657990056543761465480781687902131254120021337648242866961627867038929958118797949330532895647477346488264785208794677865195162731470401419562822294508731601727068810756785651624214271532605626015796090477025911396547003959073563140912118467042517882528966645465856177627493469435357509520989977656177152746104845719512422754621030741115276455251356106384766028601097915986090586498679208715771788493899163840649353891413488233824930419602444910048846769330507678960585695331934004781607589675013752824865427976945837884298008663204076593485578689800707248719860252460139802429313921932061127184157699591049559296111733041059283447247790645639988886668163024224661662435192488527351239213533648202914812646475226401407504431546629628248747753777529945406627533013743476191667581080958066712154487973785305656895764939576509889669711035929006423654036912116800128825906943972455045133150532247653583479282223210756332261717946415275295638801025780261339450673546817533370621472188180766489802716082564848227533677638218288301393690012819427416375445113002374218700536567841683078953008566331969702243479650178029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3db76671898c357f08758eb6d06d17c65ce6fa8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpa.estescoimbra.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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