*.lu.se

- Lunds universitet -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number bd:02:54:51:5c:7b:c6:4e:c1:63:46:6c:bc:16:09:1a was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lunds universitet

Organization: Lunds universitet
Organization unit: LU - all domains
State / Province: Skåne län
Locality: Lund
Country: SE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): bd:02:54:51:5c:7b:c6:4e:c1:63:46:6c:bc:16:09:1a
Serial Number (int): 251236185965576295290524602786918041882
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: aa:ef:44:7c:12:64:47:ea:1e:fc:19:3e:6b:fe:98:f2:d6:42:6f:94
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 29:5b:e1:79:01:0a:d9:6f:3c:36:7c:a5:3d:84:f2:b8:c6:54:1e:93
Fingerprint (sha256): 02:bc:45:67:19:18:c5:df:68:f7:34:6b:4f:19:8b:b0:c4:09:0b:5f:ed:a9:d8:70:e2:d8:96:5e:22:d8:60:d8

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.lu.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lu.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lu.se

Other certificates including the domain name lu.se

(limited to 100 certificates)
stf03.nuclear.lu.se
www.lu.se
connect.lu.se
www.lu.se
adm.rwi.lu.se
canmove-app.ekol.lu.se
moodle.nateko.lu.se
grytan.lunarc.lu.se
idpv4.lu.se
af.lu.se
lweb1122.sol.lu.se
www.lu.se
helpdesk.mhm.lu.se
rehab.adm.lu.se
lulock.luopen.lu.se
www.researchmagazine.lu.se
www.gerdahallen.lu.se
edit.info.lu.se
*.lu.se
cloud.nano.lu.se
intern.shop.lu.se
graduateland.com
jamf.esss.lu.se
crcservice.med.lu.se
www.lu.se
webmailtest.lu.se
desktop.lu.se
grub.lucas.lu.se
moodlealfa.omv.lu.se
hta-lundic.ht.lu.se
casa4.bmc.lu.se
ladoklpwlw-lnu.srv.lu.se
forvaltplan.ht.lu.se
*.gis.lu.se
workfolders.nateko.lu.se
imi-rhapsody.crc.med.lu.se
stf02.nuclear.lu.se
uportalhb-test.ldc.lu.se
www.venturelab.lu.se
www.lu.se
llasso393.srv.lu.se
monastica.ht.lu.se
ler486.srv.lu.se
lovisa.lub.lu.se
alarik.lunarc.lu.se
gernet.gerdahallen.lu.se
www.af.lu.se
grandbox.nateko.lu.se
intranet.rwi.lu.se
ipa1.lunarc.lu.se
libanswers.lub.lu.se
duo.maxlab.lu.se
jira.esss.lu.se
extern.shop.lu.se
passport.lu.se
*.gis.lu.se
intranet.rwi.lu.se
workfolders.lu.se
www.lu.se
lu.se
www.oikos.ekol.lu.se
canvas.education.lu.se
brown.crc.med.lu.se
git.ldc.lu.se
print.ehl.lu.se
ladokping-bth.srv.lu.se
jira.esss.lu.se
www.fokusforskning.lu.se
hta-lundic.ht.lu.se
extern.shop.lu.se
w-v-hdf5view-0.maxiv.lu.se
wfm423n2.srv.lu.se
kosmos.lth.se
idpv3.lu.se
gernet.gerdahallen.lu.se
kosmos.lth.se
www.gerdahallen.lu.se
whd.mhm.lu.se
dagfjarilar.lu.se
www.fokusforskning.lu.se
labguru-app.bmc.lu.se
www.jur.lu.se
venturelab.lu.se
connect.lu.se
Intranet.nateko.lu.se
citrix.med.lu.se
graduateland.com
cas.lu.se
ojstest.lub.lu.se
www.gerdahallen.lu.se
casa4.bmc.lu.se
www.gerdahallen.lu.se
exchange.lusem.lu.se
webmail.lu.se
lubas-uplan.lu.se
lms.liveatlund.lu.se
srv-ad-3.maxiv.lu.se
primweb.adm.lu.se
linteg558.srv.lu.se
connect.lu.se

Certificate

The complete raw certificate details for *.lu.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHZTCCBU2gAwIBAgIRAL0CVFFce8ZOwWNGbLwWCRowDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIyMDMwMzAwMDAwMFoXDTIzMDMwMzIz
NTk1OVowezELMAkGA1UEBhMCU0UxFDASBgNVBAgMC1Nrw6VuZSBsw6RuMQ0wCwYD
VQQHEwRMdW5kMRowGAYDVQQKExFMdW5kcyB1bml2ZXJzaXRldDEZMBcGA1UECxMQ
TFUgLSBhbGwgZG9tYWluczEQMA4GA1UEAwwHKi5sdS5zZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANyvd8Uj2+pXpsadbnxaQsfenOXVWICxaxt43jfP
q9iTcNFTb77Z6mhOqEF9uxDQZTUcz1oH3Xd6HOt9jtOcKAr5QzpiiATSnV/QRQiK
govN08hOGCpgFIpNtLhTPHi0IJfYR7s+l02P1QO732ppnrUCzeh3RZBR9S/D+m4U
vjEz2lfP0BMys/4Jn/oREhzIY/nFghVBMRG68Untf3fwvP5MmCbJYZxZ2E4yLreJ
UavqpvJfCds4cJAUi+/0rBVhnLDuu9Bl/xrbiEBzwlrX5qxNxks6pavV90PSjF6c
dP7mdUh24ErO2RdQjaKgkH/TTCLVmHj4XPkqfz0GC7xKlQUCAwEAAaOCAxkwggMV
MB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBSq70R8
EmRH6h78GT5r/pjy1kJvlDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEE
AbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAI
BgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0
aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYB
BQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNB
NC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29t
MIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQCt9776fP8QyIudPZwePhhqtGcp
Xc+xDCTKhYY069yCigAAAX9P6kpdAAAEAwBGMEQCIAGCVPfl7fDpQaID/1B9OZs0
ERNTBm5jXbv3KlYS7ci7AiBGbBn09yTtk5jSr+b382q5Oh6tC+VzTn59pDXFAora
ogB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABf0/qSjIAAAQD
AEgwRgIhAKTc+BI7trf3xnn4PCoAg1kfskOGA+1RG3e4PE3d3V6WAiEAgRcrldl8
P7uDRwSBkqyA2w+Vz5EhQ6afbuYV0bDP7EMAdQDoPtDaPvUGNTLnVyi8iWvJA9PL
0RFr7Otp4Xd9bQa9bgAAAX9P6koPAAAEAwBGMEQCIGXYfTbflMSNuv7FsYZlfIMO
O6JTppwyxTAdbVRFKU6NAiA/bxczKyocE2hATG4Rw2EoleGauYqkMdOmoN/dYSq6
hzASBgNVHREECzAJggcqLmx1LnNlMA0GCSqGSIb3DQEBDAUAA4ICAQATIQAExsHm
QBixv3uB4TaM+x/WhsXxAuE0yYMKtsuufd76nSjWdWOqbJ2INhbAGS+z2Rb7LS1W
1kbR56lWyF/EvBVZ/HUr/XIwFbUiEg98J+xlvx5nDEiDy5YIxsO49zJoa0KHa0wV
88L/6QfBzCVP5+CoY8f3iqcBnqBNKD3XBHnx/7Ed/u5hP50xk7k9NvZJ8HZuWBhe
vtb1pEPJqku263U+lAiWD/oR3g8Yk3t1ItVmE40o0CHzH+1dVUibiOY64E0oNJf1
Y9qXHYBIajsU6rqxcq42iRdX9swBItEbr3aklqGYrfjQX484TQUftmxqqTS/zDVm
m223CIkOreU61X+vEQ4YQPEnlKqL+pMd0r1vY9/rLl+aDQLNEiPuM6V3ZNqoMgg2
RtcaDfM0E/yUYMCDKYxyt37cMWIbdfLZLXmuxCwkCHYuQ9h5o0CKiji3tZ9W88AG
3UI7evwpitigoQtLbfg60cnLYWabs4tD6VpP8K46mZwDYljgIkJoKzD97FTcZ0au
/sPmzWFCdJvtKcVXa0bVmUdyWizNDSsNH+5IuQ3GB1pF/M+p+NXLUEqsAYIg7OZ9
moMOjmvZeLgSO22m1k512y2KmElrk0FPEPiTUys9bTFBdNUj5DI1x9/wWi9bzBlS
HgfdmWTe0WHK1P0grBniRPsVP999hAN6bQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K93xSPb6lemxp1ufFpC
x96c5dVYgLFrG3jeN8+r2JNw0VNvvtnqaE6oQX27ENBlNRzPWgfdd3oc632O05wo
CvlDOmKIBNKdX9BFCIqCi83TyE4YKmAUik20uFM8eLQgl9hHuz6XTY/VA7vfamme
tQLN6HdFkFH1L8P6bhS+MTPaV8/QEzKz/gmf+hESHMhj+cWCFUExEbrxSe1/d/C8
/kyYJslhnFnYTjIut4lRq+qm8l8J2zhwkBSL7/SsFWGcsO670GX/GtuIQHPCWtfm
rE3GSzqlq9X3Q9KMXpx0/uZ1SHbgSs7ZF1CNoqCQf9NMItWYePhc+Sp/PQYLvEqV
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 251236185965576295290524602786918041882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Skåne län'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lunds universitet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU - all domains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lu.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27858953515173342808195887252507873873002763859772323855425661610110275976427015626006384116612352373188278906150732207610825230741275599360607969419315329152364018843329620292709511859203361691149478642843568160623417583324906190001956958594914350244556602537659443483340288073483342842443452686969924254890231683762129818291406515745854162978771583917912430570448499825319839175183452416400264522851056703167473939900222136526474083750899590334192947134373126595395416499561599941130534183504508523369795622112420517573799065154307035783101024465481617162917732308443129511157249359019308697897169851312708847834373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aaef447c126447ea1efc193e6bfe98f2d6426f94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lu.se'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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