vpn2.tue.nl
- Technische Universiteit Eindhoven -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 7c:eb:25:33:74:53:d6:af:9a:e6:a9:10:d8:92:6d:a9 was issued on by GEANT Vereniging.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Technische Universiteit Eindhoven
Organization:
Technische Universiteit Eindhoven
State / Province:
Noord-Brabant
Country: NL
Country: NL
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 7c:eb:25:33:74:53:d6:af:9a:e6:a9:10:d8:92:6d:a9Serial Number (int): 166045215764878491880137029244293377449
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: f9:fc:69:91:47:50:e6:03:c0:43:f9:ba:3f:86:66:6c:dc:2d:96:fd
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 49:b7:73:02:c2:f8:73:8f:f1:04:f7:56:d4:6e:30:11:03:53:63:91
Fingerprint (sha256): 05:09:15:27:9d:13:b6:5d:ea:01:ad:f2:61:8a:ae:b9:65:1f:a4:96:4d:43:99:04:3b:04:d8:a3:59:28:1c:72
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate vpn2.tue.nl
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vpn2.tue.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vpn2.tue.nl
corporate-systems.vpn.tue.nl
ssl.vpn.tue.nl
vpn-test.tue.nl
vpn.tue.nl
corporate-systems.vpn.tue.nl
ssl.vpn.tue.nl
vpn-test.tue.nl
vpn.tue.nl
Other certificates including the domain name tue.nl
(limited to 100 certificates)
peach.win.tue.nl
cirrus.tue.nl
venus.tue.nl
ernsi2019.tue.nl
anankep.tue.nl
forms.carolinehummels.tue.nl
webmath.tue.nl
sites.win.tue.nl
plasimo.phys.tue.nl
cswennenhuis.win.tue.nl
sitb2020.win.tue.nl
jobs.tue.nl
alumni.simonstevin.tue.nl
compprog.win.tue.nl
groep-een.tue.nl
peach.win.tue.nl
vargas.icts.tue.nl
owas.test.tue.nl
owinfo.tue.nl
bep.win.tue.nl
articles.il.tue.nl
studyweb2.tue.nl
oocsi.id.tue.nl
trainingenonlinemedia.tue.nl
dialoog.tue.nl
kvaesen.ieis.tue.nl
nadine.icts.tue.nl
skills-assessment.tue.nl
peach.win.tue.nl
alumnionlineforms.tue.nl
delta-dev.win.tue.nl
webhost.gewis.nl
sites.im.tue.nl
peach.win.tue.nl
opennebula.tue.nl
calculuslecture.tue.nl
vandeburgt.tue.nl
pas.tue.nl
evo02.win.tue.nl
svn.win.tue.nl
rdmwiki.tue.nl
hrlink.tue.nl
seclab1.win.tue.nl
powertech2015-eindhoven.tue.nl
bep.win.tue.nl
forms.dies2015.tue.nl
alumnionlineforms.tue.nl
sites2010.iec.tue.nl
oslo.tue.nl
connecttest.tue.nl
carlos.win.tue.nl
groep-een.tue.nl
formulieren.cursor.tue.nl
platoolab.id.tue.nl
*.dianus.libr.tue.nl
dashboard.tue.nl
vpn2.tue.nl
peach.win.tue.nl
p-e.ieis.tue.nl
bnp9.win.tue.nl
sites.im.tue.nl
openepda.org
is.ieis.tue.nl
step-t.icts.tue.nl
autonomic-networks.ele.tue.nl
lyncmedpool01.campus.test.tue.nl
crowdfund.tue.nl
security1.win.tue.nl
forms.tuexperience.tue.nl
assignments.win.tue.nl
opac.ieis.tue.nl
accept-horafinita.tue.nl
sites.bwk.tue.nl
groep-een.com
technificent.nl
acapulco.tue.nl
industria.tue.nl
vandewouw.dc.tue.nl
incapsula.com
kerstwintercircus.tue.nl
innovationspace.tue.nl
landingont.step.tue.nl
tuwep.tue.nl
industria.tue.nl
peach.win.tue.nl
alumnionline.tue.nl
gale.win.tue.nl
pathways.tue.nl
ocmstest.tue.nl
faraday.ele.tue.nl
momentum.tue.nl
incapsula.com
w3.tue.nl
peach.win.tue.nl
vandewouw.dc.tue.nl
security.tue.nl
ooti-projects.win.tue.nl
autonomic-networks.ele.tue.nl
security.tue.nl
peach.win.tue.nl
cirrus.tue.nl
venus.tue.nl
ernsi2019.tue.nl
anankep.tue.nl
forms.carolinehummels.tue.nl
webmath.tue.nl
sites.win.tue.nl
plasimo.phys.tue.nl
cswennenhuis.win.tue.nl
sitb2020.win.tue.nl
jobs.tue.nl
alumni.simonstevin.tue.nl
compprog.win.tue.nl
groep-een.tue.nl
peach.win.tue.nl
vargas.icts.tue.nl
owas.test.tue.nl
owinfo.tue.nl
bep.win.tue.nl
articles.il.tue.nl
studyweb2.tue.nl
oocsi.id.tue.nl
trainingenonlinemedia.tue.nl
dialoog.tue.nl
kvaesen.ieis.tue.nl
nadine.icts.tue.nl
skills-assessment.tue.nl
peach.win.tue.nl
alumnionlineforms.tue.nl
delta-dev.win.tue.nl
webhost.gewis.nl
sites.im.tue.nl
peach.win.tue.nl
opennebula.tue.nl
calculuslecture.tue.nl
vandeburgt.tue.nl
pas.tue.nl
evo02.win.tue.nl
svn.win.tue.nl
rdmwiki.tue.nl
hrlink.tue.nl
seclab1.win.tue.nl
powertech2015-eindhoven.tue.nl
bep.win.tue.nl
forms.dies2015.tue.nl
alumnionlineforms.tue.nl
sites2010.iec.tue.nl
oslo.tue.nl
connecttest.tue.nl
carlos.win.tue.nl
groep-een.tue.nl
formulieren.cursor.tue.nl
platoolab.id.tue.nl
*.dianus.libr.tue.nl
dashboard.tue.nl
vpn2.tue.nl
peach.win.tue.nl
p-e.ieis.tue.nl
bnp9.win.tue.nl
sites.im.tue.nl
openepda.org
is.ieis.tue.nl
step-t.icts.tue.nl
autonomic-networks.ele.tue.nl
lyncmedpool01.campus.test.tue.nl
crowdfund.tue.nl
security1.win.tue.nl
forms.tuexperience.tue.nl
assignments.win.tue.nl
opac.ieis.tue.nl
accept-horafinita.tue.nl
sites.bwk.tue.nl
groep-een.com
technificent.nl
acapulco.tue.nl
industria.tue.nl
vandewouw.dc.tue.nl
incapsula.com
kerstwintercircus.tue.nl
innovationspace.tue.nl
landingont.step.tue.nl
tuwep.tue.nl
industria.tue.nl
peach.win.tue.nl
alumnionline.tue.nl
gale.win.tue.nl
pathways.tue.nl
ocmstest.tue.nl
faraday.ele.tue.nl
momentum.tue.nl
incapsula.com
w3.tue.nl
peach.win.tue.nl
vandewouw.dc.tue.nl
security.tue.nl
ooti-projects.win.tue.nl
autonomic-networks.ele.tue.nl
security.tue.nl
peach.win.tue.nl
Certificate
The complete raw certificate details for vpn2.tue.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMzCCBBugAwIBAgIQfOslM3RT1q+a5qkQ2JJtqTANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIxMTA5MDAwMDAwWhcNMjMxMTA5MjM1 OTU5WjBnMQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtQnJhYmFudDEqMCgG A1UEChMhVGVjaG5pc2NoZSBVbml2ZXJzaXRlaXQgRWluZGhvdmVuMRQwEgYDVQQD Ewt2cG4yLnR1ZS5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANfC EIpsER1AhX4VisD3Ed4wzNNZZQqvCmS7c5VgHWB6GMkN119l1g6gyhT8e4cmL3vo 0hCPJAlkAEYfNaWhQcRwdOwYYAmQAbFMALzkLljNRJwx3zq1gvnXlhiedxBE4Auq MOdu7VOZd4Bcw3HV8E88g4NzEz0bQFGTlI5vOQYh1DTIFv2uVdP5haBwuTh0h2ny /9k4BNvqlLTsD5Mfnx8Cvn4kBaXhFJqmKXmD2RsWtRLMymAWXGHriMDgR/hHDZks Yx5L1KrGnYyhPguhdChXat+uPdn5mUhAeTc3OvFAkDADww4ZjVlS3Wwxrhgh1Bmm 2txL865pYqcORLdvO2UCAwEAAaOCAfwwggH4MB8GA1UdIwQYMBaAFG8dNUkQbDL6 WaCevIroH5W+cXoMMB0GA1UdDgQWBBT5/GmRR1DmA8BD+bo/hmZs3C2W/TAOBgNV HQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIB FhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0 oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0 LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5j cnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0 dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMBMGCisGAQQB1nkCBAMBAf8EAgUA MGEGA1UdEQRaMFiCC3ZwbjIudHVlLm5sghxjb3Jwb3JhdGUtc3lzdGVtcy52cG4u dHVlLm5sgg5zc2wudnBuLnR1ZS5ubIIPdnBuLXRlc3QudHVlLm5sggp2cG4udHVl Lm5sMA0GCSqGSIb3DQEBDAUAA4ICAQCeO7tct1iFc6ClwJJ64tM4Nh7KVS3tlACV Xlvhctz0pylJAud5lm4mxfQCO/eepu9E0+t83BCd8p0++qclpEUhU8GdnRWtnhnQ QeYW+k7e8wjA5ykCkywrB2TWLC76u6I6XbHAKDcBE78DQ4RwP5uqH42N4O7u/QG1 lmW6KrY4FDDA991rgthTJDXEHn/ETT9Mjfu4XWlNWlc50yCxj6Njh0H86Wi4GwyK hx/3NsBZ2R5LYjaKuFN/5KceA8Ls2a+3YFcXUWyRc0se74C2tkR2tjubnaUAGu6R QRmORfyZ9r9hLSbTyjA4x3VJh4vwbh/UYV1ey9Q64hNuSWay93UlkFLgBR4RgsAZ 5jhXUTsJc0O/vYD54kRSiv0gvvR1uOZ9IaclGnklHc6ITktqlGQ/gLRMQRiDBsPi h64oTxoctZRyd1Fibwpq+UgCxbOwFafMfqyaewJbrWP0cExc0ZAhVtV/anZXUFnu tzocqRHFe0VS5+3IpO7TWaxmyfVR5s4iY6Wfu5ZX0RvsLDJplyRng9T8NbjSBnEy an9BUXlq/UjjxlnatFsIcthCmJI9CZ5CztMhnFsMxNe64nKb/y+10FhWd/+Ptavj j+h1bFLYOqCaQt23ukBPoyQVHurNQiouIXuGP+4yGOzbw8zy9y0yNKTNgCvfpBxT FmpHQMaXhA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18IQimwRHUCFfhWKwPcR 3jDM01llCq8KZLtzlWAdYHoYyQ3XX2XWDqDKFPx7hyYve+jSEI8kCWQARh81paFB xHB07BhgCZABsUwAvOQuWM1EnDHfOrWC+deWGJ53EETgC6ow527tU5l3gFzDcdXw TzyDg3MTPRtAUZOUjm85BiHUNMgW/a5V0/mFoHC5OHSHafL/2TgE2+qUtOwPkx+f HwK+fiQFpeEUmqYpeYPZGxa1EszKYBZcYeuIwOBH+EcNmSxjHkvUqsadjKE+C6F0 KFdq36492fmZSEB5Nzc68UCQMAPDDhmNWVLdbDGuGCHUGaba3Evzrmlipw5Et287 ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 166045215764878491880137029244293377449 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Brabant' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Eindhoven' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn2.tue.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27236932394625411917044223600767414073975181700134726966066705505682929480282885737865897267997805032926959955046935862690802090634043827792520821559430193119876385583968582801398340221597012952984054530684311584110088997923167381670423847273046834156051774980096269415422236236239649888490494818692249160551365671121082764738565232080734043530142864238004894904935968960762308032073546567132687972760291565306812707397746261138692585897757412824516084245096400463757679081865013089204439936513805705783339007050465434901650029409913548468371145842902701696651745570394121999912382363385930950465590373022930614303589 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f9fc69914750e603c043f9ba3f86666cdc2d96fd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn2.tue.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate-systems.vpn.tue.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.vpn.tue.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-test.tue.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.tue.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 009e3bbb5cb7588573a0a5c0927ae2d338361eca552ded9400955e5be172dcf4a7294902e779966e26c5f4023bf79ea6ef44d3eb7cdc109df29d3efaa725a4452153c19d9d15ad9e19d041e616fa4edef308c0e72902932c2b0764d62c2efabba23a5db1c028370113bf034384703f9baa1f8d8de0eeeefd01b59665ba2ab6381430c0f7dd6b82d8532435c41e7fc44d3f4c8dfbb85d694d5a5739d320b18fa3638741fce968b81b0c8a871ff736c059d91e4b62368ab8537fe4a71e03c2ecd9afb7605717516c91734b1eef80b6b64476b63b9b9da5001aee9141198e45fc99f6bf612d26d3ca3038c77549878bf06e1fd4615d5ecbd43ae2136e4966b2f775259052e0051e1182c019e63857513b097343bfbd80f9e244528afd20bef475b8e67d21a7251a79251dce884e4b6a94643f80b44c41188306c3e287ae284f1a1cb594727751626f0a6af94802c5b3b015a7cc7eac9a7b025bad63f4704c5cd1902156d57f6a76575059eeb73a1ca911c57b4552e7edc8a4eed359ac66c9f551e6ce2263a59fbb9657d11bec2c326997246783d4fc35b8d20671326a7f4151796afd48e3c659dab45b0872d84298923d099e42ced3219c5b0cc4d7bae2729bff2fb5d0585677ff8fb5abe38fe8756c52d83aa09a42ddb7ba404fa324151eeacd422a2e217b863fee3218ecdbc3ccf2f72d3234a4cd802bdfa41c53166a4740c69784