icts-s-dc2.tad.kuleuven.be

- Katholieke Universiteit te Leuven -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 5f:a4:6a:cc:92:14:95:7b:a0:db:97:75:b8:f2:58:4f was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Katholieke Universiteit te Leuven

Organization: Katholieke Universiteit te Leuven
Organization unit: ICTS
State / Province: Vlaams-Brabant
Locality: Leuven
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:a4:6a:cc:92:14:95:7b:a0:db:97:75:b8:f2:58:4f
Serial Number (int): 127130362427539555507385645474788825167
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f0:bc:e0:5f:15:4d:6f:0f:29:a4:6c:fd:fc:ac:06:f2:2d:75:46:af
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 99:6c:d3:47:90:59:33:0c:0d:01:99:dd:97:b9:4a:0b:ba:64:93:79
Fingerprint (sha256): 02:9c:a5:9d:77:01:b3:30:48:65:16:b9:cb:f5:6c:d1:ea:67:40:12:b6:2f:93:d9:57:25:74:20:5d:8c:0f:ec

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate icts-s-dc2.tad.kuleuven.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for icts-s-dc2.tad.kuleuven.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

icts-s-dc2.tad.kuleuven.be
tad.kuleuven.be

Other certificates including the domain name kuleuven.be

(limited to 100 certificates)
alum.kuleuven.be
support.themallschool.org.uk
print.t.icts.kuleuven.be
fac.ppw.kuleuven.be
icts-s-dc2.luna.kuleuven.be
mysql.cs.kotnet.kuleuven.be
bbup1.q.icts.kuleuven.be
account.kuleuven.be
faber.kuleuven.be
workflow.groupware.oad.icts.kuleuven.be
icts-s-exmbx8.luna.kuleuven.be
cwisdb.kuleuven.be
iks32.fys.kuleuven.be
icts-s-desigo3.LUNAH.KULEUVEN.BE
dylius.icts.kuleuven.be
lstat.kuleuven.be
ICTS-S-RDADYL1.lunah.kuleuven.be
vsm-rdg.fysad.fys.kuleuven.be
zebra.cs.kuleuven.be
testjo.t.icts.kuleuven.be
ICTS-S-RDSIVAT1.tad.kuleuven.be
testjo.t.icts.kuleuven.be
voxtron.icts.kuleuven.be
synth.cs.kuleuven.be
*.apps.sp2019.groupware.oad.icts.kuleuven.be
www-sso.groupware.t.icts.kuleuven.be
blackboard-saas.t.icts.kuleuven.be
*.apps-sp2016.groupware.oad.icts.kuleuven.be
kulapp.t.icts.kuleuven.be
groupware.tad.icts.kuleuven.be
fys.kuleuven.be
squaredup.q.icts.kuleuven.be
icts-s-scomgw2.lunah.kuleuven.be
extranet.kuleuven.be
dagkrant.kuleuven.be
fys.kuleuven.be
icts-s-exmbx23.luna.kuleuven.be
ccis-iam-voucherservice.q.icts.kuleuven.be
*.sp2007.groupware.oad.icts.kuleuven.be
spub.icts.kuleuven.be
scanner.ghum.kuleuven.be
butler.cs.kuleuven.be
gbw-s-llk01.luna.kuleuven.be
tickatlab.q.gbiomed.kuleuven.be
TD-GBS-metasys.icts.kuleuven.be
*.apps.ncbgroupware.oad.icts.kuleuven.be
icts-s-dc2.tad.kuleuven.be
prep.cc.kuleuven.be
sg1.icts.kuleuven.be
apitest.feb.kuleuven.be
*.kuleuven.be
mtm.kuleuven.be
*.groupware.t.icts.kuleuven.be
iiw.kuleuven.be
lioo-hardware.icts.kuleuven.be
testjo.t.icts.kuleuven.be
tfs.q.icts.kuleuven.be
sp.biw.kuleuven.be
graduateland.com
webi11.aps.kuleuven.be
gbw-s-vibdock01.luna.kuleuven.be
nexus.icts.kuleuven.be
ICTS-S-RDA1.tad.kuleuven.be
fs.q.icts.kuleuven.be
wayf.q.icts.kuleuven.be
my.kuleuven.be
qmp4e4.cc.kuleuven.be
nieuws.kuleuven.be
co-de.experiments.cs.kuleuven.be
hiva.esat.kuleuven.be
pool01.icts.kuleuven.be
www.cosic.esat.kuleuven.be
icts-p-idm-12.lnx.icts.kuleuven.be
toledo.q.icts.kuleuven.be
legacy-owa.groupware.kuleuven.be
find.kuleuven.be
listserv.icts.kuleuven.be
ICTS-S-RDSLIO1.tad.kuleuven.be
lidkaart.alum.kuleuven.be
*.apps-sp2016.groupware.z.icts.kuleuven.be
GHUM-S-VSH00.LUNA.KULEUVEN.BE
search.t.icts.kuleuven.be
nextvib.gbiomed.kuleuven.be
icts-d-ua-3.lnx.icts.kuleuven.be
rdweb.icts.kuleuven.be
pad.esat.kuleuven.be
icts-d-idm-3.lnx.icts.kuleuven.be
onderwijsaanbod.kuleuven.be
find.t.icts.kuleuven.be
webp12.aps.kuleuven.be
find.q.icts.kuleuven.be
wmsopleiding.cc.kuleuven.be
*.am.thomasmore.ezproxy.kuleuven.be
icts-s-crdwts1.tad.kuleuven.be
ida2014.org
icts-s-dc1.qad.kuleuven.be
drives.kuleuven.be
lyncaccess.kuleuven.be
icts-s-sfbt01.icts.kuleuven.be
stage.soc.kuleuven.be

Certificate

The complete raw certificate details for icts-s-dc2.tad.kuleuven.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjoiNlBfFeYY8dO3YgXm
9d/7gBd+Y2EP1qkAqKWco0crIQF3ryp3OF36br/yj6wKijVuNh797omjxU3qP4aP
J3XrvBMIchkUU1clkNtv54t94sO2fCeEQZXrPrnOujxH+d2AvMCraDaq8Hs7gTBv
X65kHLKL796czYTi+Z++gNSBVkOlnPdbyQh5OWZ1EIEYAgP8CKTLSiGN6CV8YDFv
E7sBEke9QuZmfku1/IxgpY6Ogsjl+wdV6ggnqKPLFrvT1EN2fz73IHd8IsWPMxsg
u0o5Y4Wk+sx9UHFODuWYPYZUu5GQlsNGxQzI9lzaVlM773NB1wT0rFo2no/qyB5I
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127130362427539555507385645474788825167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vlaams-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leuven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Katholieke Universiteit te Leuven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICTS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icts-s-dc2.tad.kuleuven.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24013944710484004017749312569162878431925577594653308856601319773102049300514893369321203248682139220988215471398992223388983148594232899322734187058773203854477094849410872076882820333855523826651416922652961233240608770558136172423635758774700069580043376644693723250403616977944698436025977290634033979613610693527753601995690750061542290599098170767081789009044272494958864822612165588471864098370048957553261806865678094629152679083777165608149721009437693987545706699942121856466657702413548591725377766329794773518228403983578097294618026504599621795278593970388658250031043630871454397945391663497858493859993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0bce05f154d6f0f29a46cfdfcac06f22d7546af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icts-s-dc2.tad.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tad.kuleuven.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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