scharrelaar-p1.leidenuniv.nl

- Universiteit Leiden -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 47:78:1e:33:a8:57:6e:c2:15:fd:91:ca:b9:5d:0f:82 was issued on by GEANT Vereniging.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit Leiden

Organization: Universiteit Leiden
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 47:78:1e:33:a8:57:6e:c2:15:fd:91:ca:b9:5d:0f:82
Serial Number (int): 94998875888776785306046389716063686530
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c9:a2:18:74:2f:aa:dd:db:d9:28:5a:d4:75:2a:71:9b:4a:a2:1a:d1
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 60:22:69:25:4e:9b:9b:5b:aa:19:ba:5a:94:99:24:35:c1:4c:ea:a7
Fingerprint (sha256): 00:f8:4a:78:fb:60:61:9a:e5:8c:aa:2d:ad:f8:26:88:b4:8e:7f:05:f6:a4:8c:f7:a9:92:d3:e8:46:53:0e:9c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate scharrelaar-p1.leidenuniv.nl

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scharrelaar-p1.leidenuniv.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scharrelaar-p1.leidenuniv.nl
digitalcollections.staff.universiteitleiden.nl
fedora-p-fes.leidenuniv.nl
islandora-p-fes.leidenuniv.nl
scharrelaar-p4-solr-proxy.leidenuniv.nl
scharrelaar-p4-solr2-proxy.leidenuniv.nl
staff-digitalcollections.universiteitleiden.nl
staff-scholarlypublications.universiteitleiden.nl
staff-studenttheses.universiteitleiden.nl

Other certificates including the domain name leidenuniv.nl

(limited to 100 certificates)
web2print.leidenuniv.nl
nmr.leidenuniv.nl
marishead.lorentz.leidenuniv.nl
leidenlawblog.nl
scharrelaar-p1.leidenuniv.nl
cas.physics.leidenuniv.nl
ppsn2020.liacs.leidenuniv.nl
datamining.liacs.leidenuniv.nl
issc.leidenuniv.nl
tornado-p-https.web.leidenuniv.nl
lucris.leidenuniv.nl
celspin-p.issc.leidenuniv.nl
foreman-develop.infra.leidenuniv.nl
leidenuniv.nl
SALMS01.leidenuniv.nl
director1-dev.srvtest.leidenuniv.nl
icga.leidenuniv.nl
uaccess.leidenuniv.nl
jira.issc.leidenuniv.nl
prosobab.leidenuniv.nl
scriptiebeoordeling-hum.leidenuniv.nl
www.math.leidenuniv.nl
Planon-BenO-t.leidenuniv.nl
login.uaccess.leidenuniv.nl
vrops-cluster.luci.leidenuniv.nl
issc.leidenuniv.nl
noah.backup.leidenuniv.nl
u-ldap-dev.srvtest.leidenuniv.nl
p-luci-001131.infra.leidenuniv.nl
zweepspin-p.issc.leidenuniv.nl
socrates.leidenuniv.nl
uaccess.leidenuniv.nl
tornado-a-https.web.leidenuniv.nl
leidenuniv.nl
lacdrvirtuallab-qa.leidenuniv.nl
sapgax.issc.leidenuniv.nl
vg5.strw.leidenuniv.nl
marishead.lorentz.leidenuniv.nl
avior.math.leidenuniv.nl
blackboardstaging.leidenuniv.nl
weblectures-a.leidenuniv.nl
usis.leidenuniv.nl
strwmail.strw.leidenuniv.nl
sapeca.leidenuniv.nl
phdcareerplatform.universiteitleiden.nl
u-tools.srvtest.leidenuniv.nl
aristotle.leidenuniv.nl
sapsra.leidenuniv.nl
www.strw.leidenuniv.nl
jss.leidenuniv.nl
mail.physics.leidenuniv.nl
mysite.leidenuniv.nl
kwartel-a.leidenuniv.nl
p-issc-007122.vuw.leidenuniv.nl
splbs02.vuw.leidenuniv.nl
huisstijl.leidenuniv.nl
form.services.universiteitleiden.nl
wagner-p.leidenuniv.nl
pontus.lorentz.leidenuniv.nl
leidenarthistoryblog.nl
smtp.leidenuniv.nl
studiegids-p.leidenuniv.nl
ooievaar.web.leidenuniv.nl
spapp30.vuw.leidenuniv.nl
saufb01.vuw.leidenuniv.nl
schildspin-dev.issc.leidenuniv.nl
lms-wyn-disp03.issc.leidenuniv.nl
raf-qa.law.leidenuniv.nl
lists.leidenuniv.nl
zweepspin-p.issc.leidenuniv.nl
webdav.leidenuniv.nl
scharrelaar-p3.leidenuniv.nl
helpdesk.universiteitleiden.nl
libcblog.nl
phdtrack-a.leidenuniv.nl
teams.leidenuniv.nl
evasys.leidenuniv.nl
x-ldap.leidenuniv.nl
cups.issc.leidenuniv.nl
uaccess.leidenuniv.nl
europeanbordercommunities.eu
science.leidenuniv.nl
vg5.strw.leidenuniv.nl
*.weblog.leidenuniv.nl
strwmgmt.strw.leidenuniv.nl
cms-a.universiteitleiden.nl
splic09.ilo.leidenuniv.nl
*.weblog.leidenuniv.nl
pinkashaw-o4.iam-ota.leidenuniv.nl
bankiva.leidenuniv.nl
rds-a.campus.leidenuniv.nl
phdtrack.leidenuniv.nl
planon-a.universiteitleiden.nl
jack-qa.web.leidenuniv.nl
web2print-t.leidenuniv.nl
grasparkiet.leidenuniv.nl
filosofie.leidenuniv.nl
jenkins.issc.leidenuniv.nl
www.readeronline.leidenuniv.nl
illinois.meta.leidenuniv.nl

Certificate

The complete raw certificate details for scharrelaar-p1.leidenuniv.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2gnKRO5i6R1GtV6vZd67
EgdkDf6rvHsnIQceT5SHOFPPUbGm9/LWf60aUtXxEpLrhL6tbnvYajNDEVMpwXK2
49J2rsdYkWSWw1cEo/Lo+KKDZoAc62+MoN5ZoNOD52AJT6vsBIMFp4kjVmQNFXTL
v7N4+wUTL23O+85etFtxhkkBUD34eBP/SYMWHorp2Z7KpF9/ILoZ5YkDSsoPbqp5
dk4b9VZxerVcxhLVJckmm5FG51E/kLZtmnQCrA/f1zna4RNO1vZSkvt7XPhpFMfi
ePQkBKgG9ZRTdxDyg5auQoDkRL8cPXeJ0ZcYZvOPSb30HYYQgDcun2DrNvmdo8QW
jGoDXtoUfFVe7oyoVH4f7uDjD6UXztKKEYhxXXog+HqnyQRgJSJXM0IUbsAdyx+i
ZwTc6RoNDqBvV7oiZRHfbPOENV2osga+eu/Tbpr26TxqxVgwdDWJOAvhg+p92J1U
e/Isa4T4USHcb4kekf8gYfzo2jh55DEuwoNlt3D+DwimaB66Mcsa6+gxTrUp6aWQ
D+BfEDTBPVzQm4FvCP8biBNwk9lKjJz9o9SS5POUEvOy3cud1ro1B/K0dwn/dDI/
7JHCfNTeW61+s6JxBraghreZDRWKwEnU3ITBCXJQFrr+EeOfhl4L+22fcBMGVQUZ
NdRy6cpUAQVRuv9TFyamE2cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94998875888776785306046389716063686530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scharrelaar-p1.leidenuniv.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889518423163372538766777259535167509433311152093415664583642961654879980922740662555228992415255958525929329450902271497066465880668449848112233801841735565643230858517538222906759663161311525180452480021748055737428544828898023523896384706849119357491072569622720318387075336527474823975563209111344050529115640543602540860012102800233993605156797475515991912905536529634755047542578307490803392550546469056467077110811080695419593649792229070435789477154956653706156547820193844903133968709879077230264089331227135400604373589805313350151375152640635918886635637010127124099386203339512145721534089130990421886288010937873434489493701200933603495037446803915049774118344781696257473360379127606316113099072259411894724254063135418056309370533582761405973935211339079133264746921608971752619034766276202213830152804789325601012254616367245893359473057982722719675220662849116257660942748124209074018588000501583756496402970987980517524222458206250258457924750518371483329413896415511325350975102295631994255010420469860538131002817478576831435426586590683887778286644582238348737158706616736101611618351382852408291453433118564703466816042890799256430432702344932427553436857998728188287917164183644139365823170104540616832970003303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9a218742faadddbd9285ad4752a719b4aa21ad1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scharrelaar-p1.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcollections.staff.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedora-p-fes.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islandora-p-fes.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scharrelaar-p4-solr-proxy.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scharrelaar-p4-solr2-proxy.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff-digitalcollections.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff-scholarlypublications.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff-studenttheses.universiteitleiden.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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