sis.hva.nl

- Stichting Hogeschool van Amsterdam -

Issued by GEANT EV RSA CA 4

About this certificate

This digital certificate with serial number 7b:0f:a9:b2:2d:09:16:a7:f5:59:8f:c8:63:e1:7a:c2 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Hogeschool van Amsterdam

Company registration number: 34215054
Organization: Stichting Hogeschool van Amsterdam
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:0f:a9:b2:2d:09:16:a7:f5:59:8f:c8:63:e1:7a:c2
Serial Number (int): 163576369778196432217635227695640050370
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: af:66:7d:ff:04:bd:75:2e:6d:42:7d:a1:5d:d6:b3:e6:32:44:86:8f
AuthorityKeyId: b6:20:0e:ae:a3:cb:e9:55:03:06:13:66:d4:ac:be:27:90:54:60:f3

Fingerprint (sha1): cc:68:83:99:3e:ce:76:82:e5:cb:27:3e:43:9d:f0:80:46:e6:89:84
Fingerprint (sha256): 06:e4:3a:f0:aa:db:1d:b5:2d:72:8d:6b:df:04:38:b7:e0:b1:1c:3c:b4:c3:ad:d1:77:65:de:0b:ac:4a:0f:56

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl

Check the revocation status for certificate sis.hva.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sis.hva.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sis.hva.nl
www.sis.hva.nl

Other certificates including the domain name hva.nl

(limited to 100 certificates)
*.medialab.hva.nl
edit-intra.dbsv.hva.nl
projectonline.dmci.hva.nl
acc-moodle.ict.hva.nl
mobiusportal.uva.dev.icts.education
acc-login.hva.nl
onderwijsconferentie.hva.nl
resultaten.hva.nl
rbs.iscb.hva.nl
fbe-magazines.hva.nl
mi.hva.nl
acc-mi.hva.nl
gitlab.techniek.hva.nl
campus.dmci.hva.nl
stage.centuri.hva.nl
incapsula.com
stagedbsv.hva.nl
teams-prd-sbc1.hva.nl
roosterportal.hva.nl
edulab.fbe.hva.nl
unixbeheer.forux.nl
incapsula.com
rooster.hva.nl
openid.hva.nl
hva.nl
secure-apis.hva.nl
moodle.cmd.hva.nl
asl.techniek.hva.nl
prdcltech0003.ict.hva.nl
intra.sem.hva.nl
webdav-intra.doo.hva.nl
databanken.bibliotheek.hva.nl
ontw-intra.mim.hva.nl
pure.hva.nl
gartnerportal.uva.prd.icts.education
roosterportal.hva.nl
legacy.hva.nl
declaraties.hva.nl
api.declaraties-acc.hva.nl
cl.acc.hvaweb.formist.nl
id.hva.prd.icts.education
apps.hva.nl
moodle-prd-fdmci.lb.hva.nl
edulab.fbe.hva.nl
incapsula.com
login.hva.nl
sis.hva.nl
incapsula.com
onderwijslab.techniek.hva.nl
*.acceptatie.hva.nl
prdcltech0004.ict.hva.nl
intra.alo.hva.nl
ex2016-prd-hva.lb.uva.nl
incapsula.com
edit-intra.iam.hva.nl
devarchief.roxen.hva.nl
incapsula.com
sis.hva.nl
acc-moodle.ict.hva.nl
hvacms-acc-redactie.lb.uva.nl
recovery.ict.hva.nl
rps.hva.nl
aanmelden.hva.nl
hvacms-prd-www.lb.uva.nl
campuscreators.nl
www.excellentieprogramma.hva.nl
gartnerportal3.uva.dev.icts.education
ac.hva.nl
hva.nl
gitlab.dmci.hva.nl
idm-acc-conhva1.acc-ad.hva.nl
login.hva.nl
sis.hva.nl
mapleta-oefen.hva.nl
curriculum.techniek.hva.nl
www.lustrum.hva.nl
wivlog.ict.hva.nl
incapsula.com
vpxldaps.ad.hva.nl
hvacms-prd-redactie.lb.uva.nl
sis.hva.nl
gitlab.techniek.hva.nl
incapsula.com
hvacms-prd-fe.lb.hva.nl
moodle-dev-fdmci.lb.hva.nl
edit-hva-instituten.hva.nl
salto-acc-hva1.ad.hva.nl
stage.centuri.hva.nl
bscw.hva.nl
discord.informatica.hva.nl
tijdreg.hva.nl
*.acc-blogs.dmci.hva.nl
beheervpn-prd.net.uha.nl
intra.si.hva.nl
lyndaportal.fdmci.hva.nl
dlwo.dmci.hva.nl
vpn.hva.nl
asl.techniek.hva.nl
api.payment-acc.ict.hva.nl
login.hva.nl

Certificate

The complete raw certificate details for sis.hva.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIwDCCBqigAwIBAgIQew+psi0JFqf1WY/IY+F6wjANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgRVYgUlNBIENBIDQwHhcNMjEwNjIyMDAwMDAwWhcNMjIwNjIyMjM1
OTU5WjCBwjERMA8GA1UEBRMIMzQyMTUwNTQxEzARBgsrBgEEAYI3PAIBAxMCTkwx
HTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMQswCQYDVQQGEwJOTDEWMBQG
A1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFtMSswKQYDVQQK
EyJTdGljaHRpbmcgSG9nZXNjaG9vbCB2YW4gQW1zdGVyZGFtMRMwEQYDVQQDEwpz
aXMuaHZhLm5sMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvvkjV+UJ
Z/lqJtwAPimHlB9OR+WvNnQrL9tbkM4u4cVCYKVJhpQI5py4sPJWzKwxulGYy7QD
XQwgPklg2/aNlnS4SNllZT1amgZaqSlTc4DLgf1xZx+Zv+v7LG64tholwxUtSqNI
c9kp8k2+Ef/ealxRrhl1Aem8z0lM9DvmMkKd9AGB+0JGhOIIsLbAAdEdTqov8ECS
M/DZHGIPgIoRMcPV61chlsC1ikK6unQxTk8H2fy6MDOWkFior+qaE4ZJWuFR1SAB
AESyk+9ea1KHQdwaNrMzabqkoBSf9SViRZ//ROOPL3k8HDYeVUFx8kgC+8qWT8UH
Egqw1gSwS2fbnUFpugQoRRV6lRjRfpqH1Q1ZsbZqFWma2eu5R51xT4QNRcuak5ey
6tUlYGd6y9LGXeM6mq2wrDlJ+kX/9vGcasQWA+ca45S6TJ+71awKUb/NhbjX/civ
VZz4ZN6SczaIekRUYXBjkvCtv6q9LUjIyc5ZALBzYq7hi2t5RuTlVHn/ZLObAb3Z
P7+egsjC8TzWORuJaygwZwX1HKpKcFenmlOY0mOsq58s5rpwSgw6Vm2yhuqn7M7B
qtuDrDPMlkAAwthPk+akWMZiH28D6u/f6KAlPA2mPwW/+ku8kA4+UbbRdaABG1Bh
Pjc8RMhxt94APjbx+FSZRALjpQELXIR0UmECAwEAAaOCAy0wggMpMB8GA1UdIwQY
MBaAFLYgDq6jy+lVAwYTZtSsvieQVGDzMB0GA1UdDgQWBBSvZn3/BL11Lm1CfaFd
1rPmMkSGjzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA1BgwrBgEEAbIxAQIBBQEw
JTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwBwYFZ4EMAQEw
PwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9H
RUFOVEVWUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0
dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRFVlJTQUNBNC5jcnQwKQYI
KwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMIIBfgYKKwYB
BAHWeQIEAgSCAW4EggFqAWgAdwBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8
cP5tRwAAAXozEywsAAAEAwBIMEYCIQCKAMt442YevSO/tMR/kCjHc3LCJkAQNphx
xsgEWGgCZQIhAJXuAbXR5cijDEp+VRMcs2xg0Cz8OmoYGSxzyYfuUI1MAHUAVYHU
whaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAF6MxMrzgAABAMARjBEAiBB
VcTyCGPVMHfhQgj8Ql/fvoaFAV8e2AFk4us1+KJingIgUtFT2VHwMwyjb5G6ZNyf
MLWgvIhT6sfgc65ZqVudy88AdgBByMqx3yJGShDGoToJQodeTjGLGwPr60vHaPCQ
YpYG9gAAAXozEyvvAAAEAwBHMEUCIA/8gVzTnXFa5fTLt8PZzAns+dUIYCGUD7cu
MHv8E3BcAiEA0NzTe4bUdl49vDj8NU0YGDL1ogPX7Zzm5PVApIxqmKwwJQYDVR0R
BB4wHIIKc2lzLmh2YS5ubIIOd3d3LnNpcy5odmEubmwwDQYJKoZIhvcNAQEMBQAD
ggIBAGoOc4WlGY3mpWQmVaWta/5r9+haa8BcxSSPwYOZ2lfm9DbHu2E+/JuFNmPu
RKZx5ZfrXEhHdDxXxpFIstiKE/l16VmcOT0gQBOhe9umBcFATbztINicylhB+5xh
UvVJvA6B+tsiKXT60VvZrS292wtQ9FX8IUfLiTuDHvxvQpAsdNyfFJwkTLc6fXL0
4+ouMRb3hmcvLhFOzKtMFXpyJkgmcJbEqDZW8dZBLRVFvuAGOS823+ry35jzq/rq
sCVZA5m7k/mzIJSYqHW7mKuCvcBLLyoW7Rugj4VK97S6waYBepp/BcPHyIbsbEeI
qUYH8iES+HvVTy242ewGInbiFM0MMfflNZzshKxxmtpBh1/NwR5Q/9P8f/ptv8sq
1swUmA3foNYbrzmZ00sDeLJ5Y0twsva13r3qjGSX4vyZDprOeEkpbCUdYTt4yZ4K
sgRJ39+pJCJBSZEp3KNmgRsFcyHCaz7s/HfcnabPM1kUiJoj9yVbrIJ1PSt3nsud
RDdq8f1954VqrIG5/ShDK/Yvl9gcH5/9Uqg18RofMfdLP0lAeK4gf4ugl8kWfdji
V/YDonyiByzoTRCvPEV4ryNQ8dsmbeg3WvtB3jmfDwYHKsZ9X4Q1UtEYtujkEegU
JLGF+TRQo5Wfogd0mLRji0OyamF+rJ7wyGLaorkVMz7zgE6m
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163576369778196432217635227695640050370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT EV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '34215054'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Hogeschool van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sis.hva.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779102664362322504815873756036203515963616847160700570109055550427616520285527497342522329216616455038804878935002360652469470221167813459252481845745478880626836858026119526667284166010278938458390930393694595549697593963865605700083658359954074123925479481821984514947781529601046181805703658684522822974118746829010588406608024671539091005281009201362053097137488220593798175097016579637981264335020137853556216948612666321235620619445741802888974034265157921142274611574926969471982943278520370020972381444841450662715887209833021572731956221293114755657040504191964119435384903843770596551403517748677997853184348419740537959202821190927354520296645024343063071107361867833948639262838251506402330817794551540704222891670915651059196263963021138081503238887293061447846235384178926789716804617787148471412758379871732527906994225040897894131531679893395463199571582402129201930955495713616426377877000253818110268648436304096198192426015325680800157122352749990517356007968369130006328462059017443779914816915190259160764353140124841039275724567245687725994350374590304837301004408581566395824909595962677987660551020140832309176722638173243880828831229423639589166073596682640560200832048665388622917575903854875814134623261281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6200eaea3cbe95503061366d4acbe27905460f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af667dff04bd752e6d427da15dd6b3e63244868f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017a33132c2c00000403004830460221008a00cb78e3661ebd23bfb4c47f9028c77372c2264010369871c6c8045868026502210095ee01b5d1e5c8a30c4a7e55131cb36c60d02cfc3a6a18192c73c987ee508d4c0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000017a33132bce000004030046304402204155c4f20863d53077e14208fc425fdfbe8685015f1ed80164e2eb35f8a2629e022052d153d951f0330ca36f91ba64dc9f30b5a0bc8853eac7e073ae59a95b9dcbcf00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017a33132bef000004030047304502200ffc815cd39d715ae5f4cbb7c3d9cc09ecf9d5086021940fb72e307bfc13705c022100d0dcd37b86d4765e3dbc38fc354d181832f5a203d7ed9ce6e4f540a48c6a98ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sis.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sis.hva.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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