www.metabolism.uni-freiburg.de

- Albert-Ludwigs-Universität Freiburg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number c4:bc:bf:d4:44:e0:2b:59:28:bd:6a:be:c4:38:e9:66 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Albert-Ludwigs-Universität Freiburg

Organization: Albert-Ludwigs-Universität Freiburg
State / Province: Baden-Württemberg
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): c4:bc:bf:d4:44:e0:2b:59:28:bd:6a:be:c4:38:e9:66
Serial Number (int): 261508729741168793934300208344151419238
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 82:2c:37:0c:74:12:1c:5f:a5:a6:3f:b3:c3:5d:c8:dc:62:08:21:07
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): af:d1:ff:e1:9f:59:dd:73:9d:f2:17:ec:85:3f:3e:a1:ee:04:8e:80
Fingerprint (sha256): 00:7c:5d:4d:e0:92:d3:da:ed:5e:f9:45:d9:c7:3c:fb:a1:52:fa:21:a1:fa:01:d1:b3:96:d8:b6:6d:1b:af:d4

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.metabolism.uni-freiburg.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.metabolism.uni-freiburg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.metabolism.uni-freiburg.de
metabolism.uni-freiburg.de

Other certificates including the domain name uni-freiburg.de

(limited to 100 certificates)
smartexerg14.imtek.uni-freiburg.de
cggitlab.informatik.uni-freiburg.de
zu.ub.uni-freiburg.de
hrk01.ukl.uni-freiburg.de
www.math.uni-freiburg.de
stalker.uni-freiburg.de
compendium-heroicum.de
oc.informatik.uni-freiburg.de
www3.psychologie.uni-freiburg.de
ad-websvn.informatik.uni-freiburg.de
wolke.fdm.uni-freiburg.de
yourls.ub.uni-freiburg.de
diz-nlp.ukl.uni-freiburg.de
www.metabolism.uni-freiburg.de
rewind.tf.uni-freiburg.de
bwcloud.ruf.uni-freiburg.de
web05.campus.uni-freiburg.de
dhcp.fun.uni-freiburg.de
weather.uni-freiburg.de
www.ilias.uni-freiburg.de
lmegit.ikoop.uni-freiburg.de
survey.vm.uni-freiburg.de
mail.uni-freiburg.de
webserver.uni-freiburg.de
uc-ccxs02.ukl.uni-freiburg.de
intranet.ukl.uni-freiburg.de
u-asta.uni-freiburg.de
ilias.uni-freiburg.de
ckan.anthropologie.uni-freiburg.de
cip.physik.uni-freiburg.de
hugel-wiki.physchem.uni-freiburg.de
uc-cmsdb1.ukl.uni-freiburg.de
alexa.informatik.uni-freiburg.de
www.ffp.uni-freiburg.de
zope-vip1.ruf.uni-freiburg.de
kis-aimapp1-t.ukl.uni-freiburg.de
hdcampus.ub.uni-freiburg.de
mylogin-dev.ub.uni-freiburg.de
stk.ub.uni-freiburg.de
oo.quarep.org
biblio.ub.uni-freiburg.de
chir-syn-03.ukl.uni-freiburg.de
uni-freiburg.de
venus.uni-freiburg.de
git.laurel.informatik.uni-freiburg.de
nuf.uni-freiburg.de
chir-syn-01.ukl.uni-freiburg.de
m5.uni-freiburg.de
www.brainlinks-braintools.uni-freiburg.de
enternix.intra.uni-freiburg.de
accloud.informatik.uni-freiburg.de
mail.stura.uni-freiburg.de
webserver.uni-freiburg.de
sp-sql.ub.uni-freiburg.de
www.umfrage.empiwifo.uni-freiburg.de
fachschaft.informatik.uni-freiburg.de
dhcp.fun.uni-freiburg.de
mif.uni-freiburg.de
www.hydro-lehre.uni-freiburg.de
janus.fachschaft.tf
pcl.physchem.uni-freiburg.de
biom128.imbi.uni-freiburg.de
docata.zv.uni-freiburg.de
biom134.imbi.uni-freiburg.de
webserver.uni-freiburg.de
www.webserver.uni-freiburg.de
webserver.uni-freiburg.de
bwservices-test.uni-freiburg.de
scm-gamma.physchem.uni-freiburg.de
ox.informatik.uni-freiburg.de
ukl-netscaler-a.ukl.uni-freiburg.de
meonas.ukl.uni-freiburg.de
geographie.uni-freiburg.de
fachschaft.informatik.uni-freiburg.de
shop.uni-freiburg.de
dstip.verwaltung.uni-freiburg.de
kis-icw-pat-t.ukl.uni-freiburg.de
www.wohnungsdatenbank.uni-freiburg.de
cci-c3.ukl.uni-freiburg.de
krz-pms-build.ukl.uni-freiburg.de
bfg.uni-freiburg.de
myadmin.ub.uni-freiburg.de
mysql.ruf.uni-freiburg.de
myaccount.vm.uni-freiburg.de
db.fachschaft.tf
moca.phil2.uni-freiburg.de
logik.mathematik.uni-freiburg.de
ad-backup1.cs.uni-freiburg.de
geographie.uni-freiburg.de
peatmoss.plantcode.cup.uni-freiburg.de
cumulus.biologie.uni-freiburg.de
cci-01b-0-1.ukl.uni-freiburg.de
p4test25.uni-freiburg.de
xgrid04.ruf.uni-freiburg.de
mail.bio.chemie.uni-freiburg.de
hugel-wiki.physchem.uni-freiburg.de
wolke.fdm.uni-freiburg.de
www.liquidity-risk.uni-freiburg.de
msm10.ukl.uni-freiburg.de
jip-mr.ukl.uni-freiburg.de

Certificate

The complete raw certificate details for www.metabolism.uni-freiburg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHpDCCBYygAwIBAgIRAMS8v9RE4CtZKL1qvsQ46WYwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMTAyMDAwMDAwMFoXDTI0MTAxOTIz
NTk1OVowgYIxCzAJBgNVBAYTAkRFMRswGQYDVQQIDBJCYWRlbi1Xw7xydHRlbWJl
cmcxLTArBgNVBAoMJEFsYmVydC1MdWR3aWdzLVVuaXZlcnNpdMOkdCBGcmVpYnVy
ZzEnMCUGA1UEAxMed3d3Lm1ldGFib2xpc20udW5pLWZyZWlidXJnLmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrksIPAcUiylQC1xAF0VZ3qFB5j0
2Tihe2xxfM94ObvmWFyBOB+yVgozuBC47XvNpGj0k5ptrquLWNgB1Vi710p/rJbO
UCc2ekWyTaCC+w6Y3/CgGdG5hIflZYXoEjafjF5QtOoMoyDAvss+f1dha2MGvba5
CWANCmNTfS3ziL+yzU8Avh7VvlCNnIC1aJI5KMvTM5cQxwZeExm1Gqo0vF56Xqi2
BLwVYfPnydm7tHbqlpVvFrjp7SbXUHY6RU+coLO8BSwc/FcPbKWpAvCHopAqH+hV
igUfESphr/TDANgv18Ghn6yVWx10PXzPFUBH6a71exn3f/p7EmashaRs+QIDAQAB
o4IDUDCCA0wwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegwwHQYDVR0O
BBYEFIIsNwx0EhxfpaY/s8NdyNxiCCEHMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMB
Af8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBA
MDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5j
b20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vR0VBTlQu
Y3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUFBwEBBGkw
ZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNvbS9HRUFO
VE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Auc2Vj
dGlnby5jb20wggGBBgorBgEEAdZ5AgQCBIIBcQSCAW0BawB3AHb/iD8KtvuVUcJh
zPWHujS0pM27KdxoQgqf5mdMWjp0AAABi01QoFEAAAQDAEgwRgIhAIlEp3YsPJA/
D+aem/O2rulmo4G1ezr+ILD/xDGIXd6pAiEA1dyViSmexE1ADcUiySeYTJwEaxaA
Sy7zr9R6PEBsKv8AdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA
AYtNUKDEAAAEAwBIMEYCIQCQrQnKEEtH6HEt0urD90P5fGgFfXxsaRDCpwj5xWdx
AAIhAK4bs+u+WE1dlSsuOoqh9xJA2+qMCUOefXTj6wzFDhHjAHcA7s3QZNXbGs7F
XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLTVCgvwAABAMASDBGAiEApsWKQZRK
ThL/YlRB9jECCNpGRIwRYJV5qR0jV4pjWf8CIQCLHAhM1QlMDYZ2TmnMYVO6YfX0
1dNQvgAzSfWLZ4dxFDBFBgNVHREEPjA8gh53d3cubWV0YWJvbGlzbS51bmktZnJl
aWJ1cmcuZGWCGm1ldGFib2xpc20udW5pLWZyZWlidXJnLmRlMA0GCSqGSIb3DQEB
DAUAA4ICAQBQhIxMtjpPIrtR6be6vviqk4lPZgfXgLOiibZwXF5h7IsASfhQJTt0
4SfUWbxa1te6hsphU5usOv/5aQZhe8qktDpNHtQpzhc8F3TnK2cQLoVATe7Y8TGO
1/ek+rQLOhU2z881WSSrKoO32bUgt7HVACarEih8Nx9ZMxuvaA6HZMEL5wQF0QEB
fU96494RxqTz5CYyb5IzYwGeuDHaTJXUzuLcPPqNYQEUNfkbvv15c1CNV+HSYZBv
zydjDXhwk7neXkDBjcsfAmd5IDb7qBbWT/Q2CMXuv56FcuGKBU/v1MY8mPt1LX0G
KevAAdY5WztkOYKL4F5yLoh8QAmh8BgNp984XoDMYkHkK7MaA8uLdYntQCwWvZwt
RDrsJMXj3ais6dHA+4TMZLP2eLq+6Qgg5um+O0+XVh3csjE/y7E17+Imc1d/ZbjQ
C+g9eRqHv0k8zk+li0bVhlu9bqFzNkWlJTMFQob6w3W4n0NM3ng5Ump0J+cGWnns
PUszyaKb8yCavVGKhWxG5umX+GJpfml+So9x7AU22vPTQZEX1ACeQqN+4y5hUNUW
x7R34F06aRTB0OnzAM8Lcmgdz4SgOpynL2iaH+BVrEQ34ZlTXchQJSLtS0N9XgXI
w9v/6jZpVseoDx6DQJ308zHPcjWKBx6M5VGKZl2AWSfp0buxIQkWjw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrksIPAcUiylQC1xAF0V
Z3qFB5j02Tihe2xxfM94ObvmWFyBOB+yVgozuBC47XvNpGj0k5ptrquLWNgB1Vi7
10p/rJbOUCc2ekWyTaCC+w6Y3/CgGdG5hIflZYXoEjafjF5QtOoMoyDAvss+f1dh
a2MGvba5CWANCmNTfS3ziL+yzU8Avh7VvlCNnIC1aJI5KMvTM5cQxwZeExm1Gqo0
vF56Xqi2BLwVYfPnydm7tHbqlpVvFrjp7SbXUHY6RU+coLO8BSwc/FcPbKWpAvCH
opAqH+hVigUfESphr/TDANgv18Ghn6yVWx10PXzPFUBH6a71exn3f/p7EmashaRs
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261508729741168793934300208344151419238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Albert-Ludwigs-Universität Freiburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.metabolism.uni-freiburg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21551823746862270808375467257470290516708075940283131972690736137688354775909782381836957492804692049234476837360988914866950658291573822614171270139753434106214774664621292937188729526377573532166277836193959031125831292198018771076906749209816716743018614217512639415740282152004708714625358697674846787454716384021741746917093689745070194090138300613919620483508869570149993663587923290016896600156660154319174743447755606071248074439521723304090988868809760181857334375824890207951509562086545501881492730102707156879772189167408129232862034041454518301960689847662023063895333390299191907985598970215857830259961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							822c370c74121c5fa5a63fb3c35dc8dc62082107
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metabolism.uni-freiburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolism.uni-freiburg.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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