*.medisin.ntnu.no

- Norges Teknisk-Naturvitenskapelige Universitet NTNU -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ef:fd:6c:e2:04:7c:e1:77:7e:8c:e4:84:fe:33:8b:d8 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Norges Teknisk-Naturvitenskapelige Universitet NTNU

Organization: Norges Teknisk-Naturvitenskapelige Universitet NTNU
Address: Høgskoleringen 1
Postal code: 7034
State / Province: Trøndelag
Locality: Trondheim
Country: NO

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): ef:fd:6c:e2:04:7c:e1:77:7e:8c:e4:84:fe:33:8b:d8
Serial Number (int): 319001350504995039195831884761909136344
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b6:01:2a:20:07:31:81:a9:e3:cf:b2:13:2a:d6:c9:ee:ff:ef:7a:ba
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 1e:6c:1c:23:04:1b:ce:51:4c:86:03:af:50:96:bd:0e:7b:3e:2c:21
Fingerprint (sha256): 01:ae:b6:51:4c:d4:b5:f3:56:ec:c8:61:2f:e4:38:00:f5:10:d0:c5:b0:d2:8b:4b:55:7f:49:73:bb:07:23:4f

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.medisin.ntnu.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.medisin.ntnu.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.medisin.ntnu.no
medisin.ntnu.no

Other certificates including the domain name ntnu.no

(limited to 100 certificates)
ivt-ts1.ivt.ntnu.no
ioffice.ivt.ntnu.no
plantuml.stud.idi.ntnu.no
ntnu-mp.ntnu.no
webmail-dovecot.item.ntnu.no
cs.itea.ntnu.no
jupyter.item.ntnu.no
openstreetmap.it.ntnu.no
mediasite.ntnu.no
pbl.medisin.ntnu.no
pypimirror.it.ntnu.no
survey.svt.ntnu.no
wiki.math.ntnu.no
ntnu-mp.ntnu.no
rk.nvg.ntnu.no
elydia-test.it.ntnu.no
orgtest.it.ntnu.no
feeds.itea.ntnu.no
*.medisin.ntnu.no
www.nvg.ntnu.no
portus.it.ntnu.no
ida.it.ntnu.no
sokutv.it.ntnu.no
adm.ad.svt.ntnu.no
bloggtest.medisin.ntnu.no
rk.nvg.ntnu.no
wagtail.math.ntnu.no
hamp.medisin.ntnu.no
jupyter.indecol.ntnu.no
discoverertest.itea.ntnu.no
apitest.nice.ntnu.no
gribben.it.ntnu.no
www.math.ntnu.no
gloshaugen-vk.itea.ntnu.no
intercourse.ed.ntnu.no
uhskypepool02.uhad.no
ntnu-mp.ntnu.no
pingu.nvg.ntnu.no
alumni.ntnu.no
nettools.it.ntnu.no
rmservice.itea.ntnu.no
mopenid.item.ntnu.no
eksamensvedlegg.it.ntnu.no
ttm4175.iik.ntnu.no
q2s.ntnu.no
adfs.ntnu.no
rk.nvg.ntnu.no
ephweb-temp.it.ntnu.no
pwchange.it.ntnu.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
it-appssm02.it.ntnu.no
openstreetmap.it.ntnu.no
pakkesporing.it.ntnu.no
webmail.phys.ntnu.no
uhskypepool01.uhad.no
romres-test.itea.ntnu.no
soknadsweb.ntnu.no
syllabus.it.ntnu.no
spsts.it.ntnu.no
florat.ed.ntnu.no
www.hpc.ntnu.no
web01.ie.ntnu.no
apps.rmwin.itea.ntnu.no
secure.math.ntnu.no
www.math.ntnu.no
mediasite.ntnu.no
bamboo.it.ntnu.no
testdcboss.it.ntnu.no
ntnu-mp.ntnu.no
www.kit.ntnu.no
uhskypepool02.uhad.no
park-utv.it.ntnu.no
video.adm.ntnu.no
www.chemie.no
ovsys-prod.math.ntnu.no
ephelis.medisin.ntnu.no
www2.pvv.ntnu.no
back-up-rct.idi.ntnu.no
ibmrs02.ibm.ntnu.no
eddis.ie.ntnu.no
secure.math.ntnu.no
secure.math.ntnu.no
aleksaee.it.ntnu.no
sikkerhet.ntnu.no
ntnu-mp.ntnu.no
ovsys.math.ntnu.no
apidemo.it.ntnu.no
wwwutv.ntnu.no
pingu.nvg.ntnu.no
uhskypepool01.uhad.no
hugin.win.ntnu.no
intercourse.ed.ntnu.no
omegav.ed.ntnu.no
owncloud.item.ntnu.no
intern.svt.ntnu.no
svn.itea.ntnu.no
epay.it.ntnu.no
pyramiden.itea.ntnu.no
almaaslab.nt.ntnu.no

Certificate

The complete raw certificate details for *.medisin.ntnu.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIISDCCBjCgAwIBAgIRAO/9bOIEfOF3fozkhP4zi9gwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIwMDYxMTAwMDAwMFoXDTIxMDYxMTIz
NTk1OVowgbsxCzAJBgNVBAYTAk5PMQ0wCwYDVQQREwQ3MDM0MRMwEQYDVQQIDApU
csO4bmRlbGFnMRIwEAYDVQQHEwlUcm9uZGhlaW0xGjAYBgNVBAkMEUjDuGdza29s
ZXJpbmdlbiAxMTwwOgYDVQQKEzNOb3JnZXMgVGVrbmlzay1OYXR1cnZpdGVuc2th
cGVsaWdlIFVuaXZlcnNpdGV0IE5UTlUxGjAYBgNVBAMMESoubWVkaXNpbi5udG51
Lm5vMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvGlANp9jNG+Hx5RC
8TRnhVzdy27VMOdSUWjrCIB/Qm/RWGPjLgA7gQSbua8SHQzraSC3d5o+wuHQq7j7
8ivxAw2OYhEJdkz1u1CiYPQrRxVKJWCJW5hJjPOL33jQtN+Vy+1YCUikRwMZzFb6
YxFd6qIpzgcYYIeJQ738caANVEFOx7IN96Rzdl/I/F5WyxO9zgaZSEkj2FnFRxi0
HQEQo4O9Q2ha/TP6PE+zcHJGaI602JowOoTxWh6hBfYyvJq8FsiQnxeeoIic2SQ2
XDnDmaMcfVTsgyfaSbhuGvv6LD3OVvzjQroHYESpEL/ofejjd2SU6ypUjZXJxgXh
364Uu38AvH1PP42NKum0BRuSJdQVM6DvIIHD8gy0UvQ5VG/FLHBnrMCoY8kfoNdG
Md3Ho6xSKZyOe14rBt8nBLF3nIMBMrm+ittrJOTgEXfKOTXGQpNrst3fq2JQZ6uy
Va6EFjVDozZNXgdEFbyt3mYaNTQwqMZ4nK4KCZxB1sCN8Dkt8E6yziplXS+70JJg
0a88EkBTg5/FmfQl0vEeblHdTJeqHGi9N4oYP9x8QDSzU9s5qSOJ4egCaH9tZ0Cv
Q24wF0rMj8uaYlfh4L1DpCq8OKVw4wmnetzoJtj1UqdcMnX4Sed8HUzhkYt9eLwQ
VP2IjqaHPwVNa6RRDtdCnlycbW8CAwEAAaOCArswggK3MB8GA1UdIwQYMBaAFG8d
NUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBS2ASogBzGBqePPshMq1snu/+96
ujAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsG
AQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0f
BDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9W
UlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9H
RUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUH
MAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMC0GA1UdEQQmMCSCESou
bWVkaXNpbi5udG51Lm5vgg9tZWRpc2luLm50bnUubm8wggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgB9PvL4j/+IVWgkwsDKnlKJeSvFDngJfy5ql2iZfiLw1wAAAXKi
gnn6AAAEAwBHMEUCIAQiMM/W9fH2s92itoTkaRu0fsoBIHw9wFZ6VzYNz52hAiEA
3YdDpowrWV44jc80FocxtPYIC9qnTmyuGAnSAVSdx/oAdgCUILwejtWNbIhzH4KL
IiwN0dpNXmxPlD1h204vWE2iwgAAAXKignohAAAEAwBHMEUCIBiW02TBnzqD/q+o
0jeW481bGo4RleLOmg6anajzltvCAiEAudGWihCeOg9lV3HxbTvUCq3QL6VFnwCf
w8f0ByHeUbAwDQYJKoZIhvcNAQEMBQADggIBACVWJfPn0qBoxkMTuQEt5X9MWmXj
c1YzPstwS/ZYQNUX/2kp4PynQwUzOiXlETp895RnYVimwRVAAlMhq0axKTPLjcMl
sOwsr0IJkdGcJY1ANTrevGA5/RMXXzBWivnBUHQs+rhTW3O8AzXUdITMWJCimxyz
ZU6XxuI+vjqbi4bf1/2VT7vS4Y7/IeGKFzBogg9iBAddVmWvaZNqI2q43r60WO6e
gWUGYXJumTQbSztNTwI7lQFnJsfROZVsHmSeVPdUzE8m1Z6mTmhHa3+bj1uf1WoR
YgAF08PTismUbmmstdt+yU7YHqrZWcVm8CP6VgLgrTE6jUqKaLRCRauGbYY0JK+X
MIE5XelT7GM4u0xgAX0n/i4k14AHO8H9WumxL0PD+ABBOiFYD8zN2c2L/1BGqwPY
9tIv/kra4VVWEfF6dLVBgQRcPPfvD6cZMT1n4ESXh2hlukZHHZhGRdSAbB2hfSqf
sHDXuNcftzsQtaOnCgCoqLqjpgZCNQOCaFailz4NNSr7eHVNk8cKRpp6CPIak4jR
iYz+yRsgcuwAxK7/KrjhZGgHNUquLaHSOFAXpqLSYXdPPfHVHyo7MpQWJXxVom9n
RUoe7yOcEFY5mgGuDb89xGLFM9tuI4sscu4nlYdxTF3o6e4D18Xz16Nwh2+TchCa
hRKEYaR2OXbpFNR7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319001350504995039195831884761909136344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7034'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trøndelag'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trondheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Høgskoleringen 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Norges Teknisk-Naturvitenskapelige Universitet NTNU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.medisin.ntnu.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768650373609814453937045971795358300326416527195465758097723640702640882862200035954227890589305893462095121778261321668274959296087945754153595041362291833948989008732124928770905247575801055122703130156892411760472375388971077761751004408188956059686196921383781329107735354277232775162583615677294300067391899952855099827104505147434877592915569734737516531637409496283544344910018362410735524162637259362724043899774561110623856449023475813706077549834453292710337028309347625838739217272899663599786681762075671706250655513741998763381369357810737689640558447183275996271384855559537742119054850605999883037301710491384645240612941376298952587455541351478580182996653583956326872648752209649545664922634060303857943846769806805491815203294618000597319789983256768950721358348103285061555903910510700223953289859101770914799653428639795268136615082383043212806026848665521027686310886711087606866771423359692588002344013180591076468789542585979668200881054961129265791185491261502085893742451581781840086371456216090754592890584631452458925644361485064818087711155816865402119104798572235695587426664962346846615162288585455071756788161376912923593727326959715300894041867844146418500870907741586396716232982377703293022457589103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6012a20073181a9e3cfb2132ad6c9eeffef7aba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medisin.ntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medisin.ntnu.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000172a28279fa00000403004730450220042230cfd6f5f1f6b3dda2b684e4691bb47eca01207c3dc0567a57360dcf9da1022100dd8743a68c2b595e388dcf34168731b4f6080bdaa74e6cae1809d201549dc7fa0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000172a2827a21000004030047304502201896d364c19f3a83feafa8d23796e3cd5b1a8e1195e2ce9a0e9a9da8f396dbc2022100b9d1968a109e3a0f655771f16d3bd40aadd02fa5459f009fc3c7f40721de51b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00255625f3e7d2a068c64313b9012de57f4c5a65e37356333ecb704bf65840d517ff6929e0fca74305333a25e5113a7cf794676158a6c11540025321ab46b12933cb8dc325b0ec2caf420991d19c258d40353adebc6039fd13175f30568af9c150742cfab8535b73bc0335d47484cc5890a29b1cb3654e97c6e23ebe3a9b8b86dfd7fd954fbbd2e18eff21e18a173068820f6204075d5665af69936a236ab8debeb458ee9e81650661726e99341b4b3b4d4f023b95016726c7d139956c1e649e54f754cc4f26d59ea64e68476b7f9b8f5b9fd56a11620005d3c3d38ac9946e69acb5db7ec94ed81eaad959c566f023fa5602e0ad313a8d4a8a68b44245ab866d863424af973081395de953ec6338bb4c60017d27fe2e24d780073bc1fd5ae9b12f43c3f800413a21580fcccdd9cd8bff5046ab03d8f6d22ffe4adae1555611f17a74b54181045c3cf7ef0fa719313d67e04497876865ba46471d984645d4806c1da17d2a9fb070d7b8d71fb73b10b5a3a70a00a8a8baa3a606423503826856a2973e0d352afb78754d93c70a469a7a08f21a9388d1898cfec91b2072ec00c4aeff2ab8e1646807354aae2da1d2385017a6a2d261774f3df1d51f2a3b329416257c55a26f67454a1eef239c1056399a01ae0dbf3dc462c533db6e238b2c72ee279587714c5de8e9ee03d7c5f3d7a370876f9372109a85128461a4763976e914d47b