va-web.zmml.uni-bremen.de

- Universität Bremen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 6b:a8:56:15:dc:1c:eb:52:86:bd:72:85:1d:92:73:e8 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universität Bremen

Organization: Universität Bremen
State / Province: Bremen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:a8:56:15:dc:1c:eb:52:86:bd:72:85:1d:92:73:e8
Serial Number (int): 143101447440358839647618683196224467944
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 82:f9:de:97:e5:4f:1f:8c:b3:32:70:90:7e:fd:d9:cc:fa:4e:d1:71
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 1a:7c:75:47:c6:c6:cb:b0:a2:58:2a:a2:89:1c:14:d4:60:58:48:b2
Fingerprint (sha256): 02:d6:3f:52:a1:2a:43:e2:3a:1e:6b:31:f3:f7:57:33:5e:e8:bf:56:ff:bb:c3:4c:3b:20:52:70:06:28:1d:36

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate va-web.zmml.uni-bremen.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for va-web.zmml.uni-bremen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

va-web.zmml.uni-bremen.de
va-bne.de
www.va-bne.de

Other certificates including the domain name uni-bremen.de

(limited to 100 certificates)
cama.uni-bremen.de
www.zrf.uni-bremen.de
www.zkpr.uni-bremen.de
psychstat.uni-bremen.de
elearning.uni-bremen.de
www.igmr.uni-bremen.de
www.tdv.uni-bremen.de
www.agcom.uni-bremen.de
www.iaas.uni-bremen.de
www.rackstation.ant.uni-bremen.de
nagios.ref54.uni-bremen.de
jitsi.vm.uni-bremen.de
www2.iniis-neu.uni-bremen.de
agim.uni-bremen.de
www.mm2014.uni-bremen.de
mail.biba.uni-bremen.de
www.sfb597b1.uni-bremen.de
www.psychologie.uni-bremen.de
www.biba.uni-bremen.de
www.informatik.uni-bremen.de
claudialubert.de
chisame.informatik.uni-bremen.de
www.isdmm15.uni-bremen.de
www.fb8.arcgisserver.uni-bremen.de
www.vfwf.uni-bremen.de
www.soziologie.uni-bremen.de
ai-comm.informatik.uni-bremen.de
www.iuv.uni-bremen.de
ctf.onoc.eu
tc-http3.testcenter.zmml.uni-bremen.de
toychest.ai.uni-bremen.de
nagios.informatik.uni-bremen.de
va-web.zmml.uni-bremen.de
ident.uni-bremen.de
www.am-course.uni-bremen.de
www.bccms.uni-bremen.de
www.wl.uni-bremen.de
soft.zfn.uni-bremen.de
crm.akademie.uni-bremen.de
www.zait.uni-bremen.de
www.infotag.uni-bremen.de
ease.informatik.uni-bremen.de
www.pflegechancen.uni-bremen.de
jupyter.zmml.uni-bremen.de
obrezkov.informatik.uni-bremen.de
www2.ew-lehramt.uni-bremen.de
gitlab.suub.uni-bremen.de
www.lpka.uni-bremen.de
litmus.informatik.uni-bremen.de
www.regionalentwicklung.uni-bremen.de
www.politikdidaktik.uni-bremen.de
www.celina.uni-bremen.de
bscw.ips.biba.uni-bremen.de
www.ingenieurinnen-sommeruni.uni-bremen.de
www.verdi.uni-bremen.de
www.deutschlandstudien.uni-bremen.de
www.wiwiselbsttest.uni-bremen.de
klima.uni-bremen.de
kipos.informatik.uni-bremen.de
scheinwerfer.uni-bremen.de
cast.zmml.uni-bremen.de
egroupware.zarm.uni-bremen.de
guest.wlan.uni-bremen.de
scheinwerfer.uni-bremen.de
mailman.zarm.uni-bremen.de
www.vivatop.de
www.ecophysiology.uni-bremen.de
gitlab.zarm.uni-bremen.de
tc-ueb2.testcenter.zmml.uni-bremen.de
oae.zmml.uni-bremen.de
umfrage.ips.biba.uni-bremen.de
www.soziologie.uni-bremen.de
www.spruehkompaktieren.uni-bremen.de
ikap-web.biba.uni-bremen.de
moin-test.uni-bremen.de
www.erasmus-initiative.uni-bremen.de
contradictionstudies.uni-bremen.de
www.soziologieselbsttest.uni-bremen.de
ines.zfn.uni-bremen.de
www.nwt18.uni-bremen.de
www.wikifg22.uni-bremen.de
rocketchat.zarm.uni-bremen.de
www.fpb.uni-bremen.de
www2.fb6.uni-bremen.de
srv-jr-www.vw.uni-bremen.de
www.europeanstudies.uni-bremen.de
transair.informatik.uni-bremen.de
www.hospo.uni-bremen.de
gerhard.meyer.uni-bremen.de
bbb-1.elearning.uni-bremen.de
ldap-cart.informatik.uni-bremen.de
www.crie-umfrage.uni-bremen.de
www.kinder-uni.uni-bremen.de
www2.fb8.uni-bremen.de
gitlab.csl.uni-bremen.de
dmis.math.uni-bremen.de
toychest.ai.uni-bremen.de
cslog-nas01.informatik.uni-bremen.de
mailman.zfn.uni-bremen.de
www.diagnostik.uni-bremen.de

Certificate

The complete raw certificate details for va-web.zmml.uni-bremen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIdTCCBl2gAwIBAgIQa6hWFdwc61KGvXKFHZJz6DANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwOTI4MDAwMDAwWhcNMjMwOTI4MjM1
OTU5WjBgMQswCQYDVQQGEwJERTEPMA0GA1UECBMGQnJlbWVuMRwwGgYDVQQKDBNV
bml2ZXJzaXTDpHQgQnJlbWVuMSIwIAYDVQQDExl2YS13ZWIuem1tbC51bmktYnJl
bWVuLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv5PoGl07Sl7E
BSadVinwzcqVnSRWX9dK+GwPEnuWv6Nk3DAVdQn/0weFV7gSSCbk0Kh2yUuFcO/W
xrQMVZkSUmHP7uvcb9NR90wAAtouULTQcDx2ZXGbw/LgXz0BLpWYwEvVPCgDaTY8
NshHIdf0spg+xXJEaNYA5yup/sm/WClT0p389Zs0LwiLi0BDJ+CEsXyLF7FchZqr
xqgdyLbyb86pCfILGW9MfVMUAzGLyf3XdzpB3bxH/eIvWvhHaNT1fifuPFYaueDY
xRGWNaGmbC+5UV/Stb8r7PaAR4neqnQSDgQJLW31k4KQJQZdP7TwR396A0e2sp/J
Br5IWf1Qzl4eLyiU5wugS2hcf5Rm0UpNM00wWhEWw/QV0OIEQ4W/8rUeibxDblT4
KP57PxjEAU5g2Fed5jDgvbZYoS4c4fENLrCCh/QBjl/fYDRrn2z8BVc4YPn1/+AB
w+i8lXDdaMv4M7NxIfH0SmL0vl7NNs9aB1UHmh3bnsw25VvbOUPiObp1d/kZC1rW
cLQU4p0KjqFbmxfzh7qMxIxvEaYnCE3ruQG/f4XIkMd0FdDOwmRdhwORl4eSURDt
KniBxJTtlj82OzkxV2dBwRnnL7Gi4Dj5xfUTudLcMqTiaYAzBub2Eh8w0qKrXp6o
RG/JI2O2WQflw5Z0qbB6GKfdKdMzUT0CAwEAAaOCA0UwggNBMB8GA1UdIwQYMBaA
FG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBSC+d6X5U8fjLMycJB+/dnM
+k7RcTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMG
CCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYD
VR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFO
VE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6
Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYB
BQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMIIBfQYKKwYBBAHW
eQIEAgSCAW0EggFpAWcAdwCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yC
igAAAYOE0fRGAAAEAwBIMEYCIQCqqTa1L11Zza6Wx8sO2kXM0H5Bto9lUxjLvYUr
8sc9ngIhANhiv8dUrac17gBvcCKRRudRrACKMfqkjLn2MrTf0W37AHUAejKMVNi3
LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGDhNH0YAAABAMARjBEAiArHBCe
7xnhcNOK8SobKqORbniX7thTmV9TWC3Q0qCRAQIgVt7kk6aoKoi0t9L6hhHw2lIL
MZTz/rpz98ZusKpCgY4AdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9
bgAAAYOE0fQrAAAEAwBGMEQCIC47JtxELipk2kg1km542Bjk2o2MW0UdVRXW0lno
sXEhAiAeraXkdqkiNnQ20haEMPK09SFZjBsUxdBVj72awXFuoTA+BgNVHREENzA1
ghl2YS13ZWIuem1tbC51bmktYnJlbWVuLmRlggl2YS1ibmUuZGWCDXd3dy52YS1i
bmUuZGUwDQYJKoZIhvcNAQEMBQADggIBAF5bOAvU7SoMmknw6As3Jgbxn1K0Zzqc
OtXo9h3rjNQ0LgnGStZnXQcEOlGTZV4gjvlavZrCI2b44USXaVFsvP0DVHAaAyP9
Z92gBjKNpYNqWrLXgS6sYG0s/L4UCXbJzF1f5AThdzad6dX+bYr9tcw6z1u3LIvE
HRDrg/tN6QilcTIM5Ka4jRASkOfjG9MeP1e70CFYEwF6Bamp5jwF3cgqByLEtEFJ
mqEMBQc4Kr+z5lrNhDOs8bXOntQ7PHzJewJGxCghOJ8LpU/pHA81hYIjX8Gg8FA2
ZAqYNh5KIil4kUZk5VPmPVElApW3NeQq4GM0LP4cfJdYeeb0z/p8wYfxPgkmtoI1
kFcrl3kYyz3VkPtKq/2XiZVII15kPt3V8pIHJrGooSj9MeJU9equcLHNdp/ARZue
lWL+TSwB2hK9qH37CPXhh37PmcNN6SM1d4RfOar1Dwhs6lJ1QnP7OCp3ahI8gDQd
ars9n/z7rGijy9GNz2OZb3XQ5VigL2PG0mdztP4oUDRZeMZcdX7J0Yei2IzPqk46
V058z0lO5oEoJDhQ3a98oR5pWwwlFL/6JD5MtDeZ3QHwODfFU+9oZ7cPgFkunK7B
32SG7EggQGK9qS+gCWPHcp9Mly50aXSwiE235JgsaDnH3K5x6dTDL2GQwHQ+zt6E
sNoROBoebW6c
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143101447440358839647618683196224467944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universität Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'va-web.zmml.uni-bremen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781569073619256240294767362028542929584086935706878671904375718297134302447470403844105726294870301288032616647052798983405371542390522888633469626044619978917554154817526616908452788484085160932259316072017673817452178783798176435143793732789328216263887682757803231283142758237276318942771339343374079052012171762983779847223931769124032299280298720250418603580292815275736388023961071240547768757778308414302786292115241641418096459983992844999949176585079707974259514416970656605027903750532313261152749786801421440285415620844670692428500476027418579691272796893530737936913339436792359815103840383595719474953067725115845599430323371118864492236873724599915112977338167825897842337965753005669731439174418468733553047808684984303567437472479684996660242864720214462912124996904472572794034185933673047490082542275670475023112268523567243920262193972806544233432025686532693550192335561560908769188369946330022302835983269257808188265522866677165510681912534019821488104682892551092546700390547975435609413721303278099320768481241851069914701838732277719643957731763698364708154311427070620103589261993399991776726633810342689084633654259296309769844630364061817176831053140023116342313107386911815420620067330332778620846821693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82f9de97e54f1f8cb33270907efdd9ccfa4ed171
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va-web.zmml.uni-bremen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va-bne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.va-bne.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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