api-opa.unive.nl
Issued by COMODO RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 46:1b:b9:d1:7b:d3:f3:d9:be:c1:c1:77:de:e2:56:51 was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api-opa.unive.nl,OU=Domain Control Validated+OU=PositiveSSL
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 46:1b:b9:d1:7b:d3:f3:d9:be:c1:c1:77:de:e2:56:51Serial Number (int): 93189920562910083597220216698753406545
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: e2:cb:e4:e4:af:dd:84:59:e3:87:cc:65:3b:88:ef:4d:5c:23:b1:f1
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7
Fingerprint (sha1): 40:b9:38:7a:9d:1d:66:b2:3c:d3:60:33:bf:2b:2a:bb:dc:28:e9:2b
Fingerprint (sha256): 07:f1:2f:5c:76:7c:d2:d7:8c:75:26:db:bc:d0:b3:d0:43:45:da:39:1e:e7:08:1c:ad:e9:88:81:b6:6c:b3:cd
Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl
Check the revocation status for certificate api-opa.unive.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api-opa.unive.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api-opa.unive.nl
www.api-opa.unive.nl
www.api-opa.unive.nl
Other certificates including the domain name unive.nl
(limited to 100 certificates)
www.acc.unive.nl
web.unive.nl
mail.vgz.nl
tracking.unive.nl
acc.unive.nl
mijn.unive.nl
rechtshulpagrarisch.unive.nl
lync.unive.nl
api-opa.unive.nl
iw.unive.nl
tracking.unive.nl
iw.unive.nl
bb.unive.nl
vpn.unive.nl
remote.unive.nl
api-atp.unive.nl
webwerken.unive.nl
api.unive.nl
rechtshulpagrarisch.unive.nl
dispatchtest.unive.nl
mijn.unive.nl
vpn.unive.nl
mxb.unive.nl
services-pat.unive.nl
unive.nl
mxa.unive.nl
prod.unive.nl
vpn.unive.nl
tracking.unive.nl
email.unive.nl
tracking.unive.nl
rd.unive.nl
dsuniverabobank.unive.nl
privatelease.beta.unive.nl
stadenland.unive.nl
www.unive.nl
lync.unive.nl
www.unive.nl
privatelease.beta.unive.nl
zakelijk.unive.nl
tracking.unive.nl
api.unive.nl
tracking.unive.nl
rechtshulpmkb.unive.nl
www.unive.nl
mijn.unive.nl
mijn.unive.nl
vpn.unive.nl
rechtshulpagrarisch.unive.nl
acc.unive.nl
stadenland.unive.nl
opa.unive.nl
tracking.unive.nl
rechtshulpagrarisch.unive.nl
cdn-pat.unive.nl
rechtshulpmkb.unive.nl
iw-pat.unive.nl
*.prod.daas.unive.nl
mijn.unive.nl
www.unive.nl
api.unive.nl
videochat.unive.nl
email.unive.nl
mail.unive.nl
lync.unive.nl
cdn.unive.nl
login.pat.unive.nl
mxb.unive.nl
pns-digital.unive.nl
*.ot.daas.unive.nl
services.unive.nl
bb.unive.nl
www.unive.nl
beta.unive.nl
login.unive.nl
www.unive.nl
flexwerken.unive.nl
pns-digital.unive.nl
dispatchtest.unive.nl
pns-digital.unive.nl
pat.unive.nl
vpn.unive.nl
dispatch.unive.nl
tracking.unive.nl
365.unive.nl
tracking.unive.nl
cdn.unive.nl
accmijn.unive.nl
tracking.unive.nl
cdn-pat.unive.nl
cdn.unive.nl
email.unive.nl
webwerken.unive.nl
iw-pat.unive.nl
vpn.unive.nl
pat.unive.nl
email.unive.nl
vpn.unive.nl
webmail.unive.nl
www.unive.nl
web.unive.nl
mail.vgz.nl
tracking.unive.nl
acc.unive.nl
mijn.unive.nl
rechtshulpagrarisch.unive.nl
lync.unive.nl
api-opa.unive.nl
iw.unive.nl
tracking.unive.nl
iw.unive.nl
bb.unive.nl
vpn.unive.nl
remote.unive.nl
api-atp.unive.nl
webwerken.unive.nl
api.unive.nl
rechtshulpagrarisch.unive.nl
dispatchtest.unive.nl
mijn.unive.nl
vpn.unive.nl
mxb.unive.nl
services-pat.unive.nl
unive.nl
mxa.unive.nl
prod.unive.nl
vpn.unive.nl
tracking.unive.nl
email.unive.nl
tracking.unive.nl
rd.unive.nl
dsuniverabobank.unive.nl
privatelease.beta.unive.nl
stadenland.unive.nl
www.unive.nl
lync.unive.nl
www.unive.nl
privatelease.beta.unive.nl
zakelijk.unive.nl
tracking.unive.nl
api.unive.nl
tracking.unive.nl
rechtshulpmkb.unive.nl
www.unive.nl
mijn.unive.nl
mijn.unive.nl
vpn.unive.nl
rechtshulpagrarisch.unive.nl
acc.unive.nl
stadenland.unive.nl
opa.unive.nl
tracking.unive.nl
rechtshulpagrarisch.unive.nl
cdn-pat.unive.nl
rechtshulpmkb.unive.nl
iw-pat.unive.nl
*.prod.daas.unive.nl
mijn.unive.nl
www.unive.nl
api.unive.nl
videochat.unive.nl
email.unive.nl
mail.unive.nl
lync.unive.nl
cdn.unive.nl
login.pat.unive.nl
mxb.unive.nl
pns-digital.unive.nl
*.ot.daas.unive.nl
services.unive.nl
bb.unive.nl
www.unive.nl
beta.unive.nl
login.unive.nl
www.unive.nl
flexwerken.unive.nl
pns-digital.unive.nl
dispatchtest.unive.nl
pns-digital.unive.nl
pat.unive.nl
vpn.unive.nl
dispatch.unive.nl
tracking.unive.nl
365.unive.nl
tracking.unive.nl
cdn.unive.nl
accmijn.unive.nl
tracking.unive.nl
cdn-pat.unive.nl
cdn.unive.nl
email.unive.nl
webwerken.unive.nl
iw-pat.unive.nl
vpn.unive.nl
pat.unive.nl
email.unive.nl
vpn.unive.nl
webmail.unive.nl
www.unive.nl
Certificate
The complete raw certificate details for api-opa.unive.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG2DCCBcCgAwIBAgIQRhu50XvT89m+wcF33uJWUTANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0xODExMDUwMDAwMDBaFw0yMDExMDQyMzU5NTlaMFQxITAfBgNVBAsTGERv bWFpbiBDb250cm9sIFZhbGlkYXRlZDEUMBIGA1UECxMLUG9zaXRpdmVTU0wxGTAX BgNVBAMTEGFwaS1vcGEudW5pdmUubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDUER01ITdu7vLx0EP69R+G6qX+wK/Vc+JCMF1fbebjtqoHEReeHchI NnvLBESCZPi+Dc0+CAM19gVXqO4rtW7ADXEWXm2o3yL5tkDSQZPCh5vsSw3G3Gj3 nceepyX6EMLSSZmZiXk3XWRa69iTxtGG+RNHBV026lsR9GFNElUJq8h0oEJe8nUX 82HscinA2+xBBTF+gWV7qPR2POZKWc0RtTP2O22HcUfcNq65OFW+Kvm5IoNU587j lTE7tHNb6qWwqc4fOccT4LPr3JJJfaG8pQZefn6BJXLfdW3s53Lke+xbGd0jpwqw 4FhAHLCQTHnisxaNqcm457Jv5R8XUcJbAgMBAAGjggNnMIIDYzAfBgNVHSMEGDAW gBSQr2o6lFoL2JDqElZz30O0Oija5zAdBgNVHQ4EFgQU4svk5K/dhFnjh8xlO4jv TVwjsfEwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCME8GA1UdIARIMEYwOgYLKwYBBAGyMQECAgcwKzAp BggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLmNvbS9DUFMwCAYGZ4EM AQIBMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NP TU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYUGCCsG AQUFBwEBBHkwdzBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5jb21vZG9jYS5jb20v Q09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMDEGA1UdEQQqMCiCEGFw aS1vcGEudW5pdmUubmyCFHd3dy5hcGktb3BhLnVuaXZlLm5sMIIBgAYKKwYBBAHW eQIEAgSCAXAEggFsAWoAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9 ywAAAWbi5S+8AAAEAwBIMEYCIQDyAMoESyR/be/CL88RKNoSBhoX/eF8hKMir+Es kMBFxAIhAJxy2wqGc9dMPvNKA2plcZdgCPIGfn54EQy4SyEhVFouAHYAXqdz+d9W wOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFm4uUv8wAABAMARzBFAiBFzuhy a9AGq8/PhSsgEePu7zc9+1OpQBe7HbeXQhXgDwIhAI5ppe7WX2oCwJTFYyqe8Izk k7+cD/puxi2DU+D0rr/KAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqO snMAAAFm4uUwBQAABAMASDBGAiEA2G3PHdL5I9ZqZ6E9uLJcIB0IJJ/iR+LO6bjm F/CFbCgCIQDz6uxXjP09+CBN+TD64MsVAySCBhSGTGMfaJO7Q0AZbjANBgkqhkiG 9w0BAQsFAAOCAQEAhYK4fRqFCuyGRJQIEa3obOgpvL1XBGqDv25eXREMCk/u25Q7 65TOzxpauhvU913S2/337ZNPt7mSmTpSYAOd9aMbl0wcdmUZ3gGP0ii98zPbOrTO 3dLgL1B7Pn2XMY3oX1Rq4XKBDD4nPdCM1Nc5s80Ab2UvJ8RqZYkymZKMaOZ1nOpZ EktLKP6gwCiGlNWUybkMlVU6rscyyhxU3uxcGslkaCZEKXQSvk0BoEGi5+jMkewQ HW9xUjicJunqAIO3PWsqB4fVdezmS/JXWYoOv9W+SksCP6aZg7cLNJUcxS+nfAje BF8PrW3GA1lXLblucCicRQvG5SqsPhWGYzl/Vg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BEdNSE3bu7y8dBD+vUf huql/sCv1XPiQjBdX23m47aqBxEXnh3ISDZ7ywREgmT4vg3NPggDNfYFV6juK7Vu wA1xFl5tqN8i+bZA0kGTwoeb7EsNxtxo953Hnqcl+hDC0kmZmYl5N11kWuvYk8bR hvkTRwVdNupbEfRhTRJVCavIdKBCXvJ1F/Nh7HIpwNvsQQUxfoFle6j0djzmSlnN EbUz9jtth3FH3DauuThVvir5uSKDVOfO45UxO7RzW+qlsKnOHznHE+Cz69ySSX2h vKUGXn5+gSVy33Vt7Ody5HvsWxndI6cKsOBYQBywkEx54rMWjanJuOeyb+UfF1HC WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 93189920562910083597220216698753406545 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-opa.unive.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26770959926078865189362019833988393097836360201877215428138050141529020589255150016702570948097517260143276678063312326458205831706772118796591942149771424608177264974130835601027000405076503702708184023182383178898084058921064871569701326228822260220199586705685907775118794108820324558327134658325003146019870385730811418486828676992107522112069199664771684833074381807767272624621889669691385473892960062324816584228006175261242665010640938577415761760710582052517064083995066520718043744177192828343661333220215605326263870589572256052540901957015506585433281235333414526836173567861828310212454727628316566733403 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e2cbe4e4afdd8459e387cc653b88ef4d5c23b1f1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-opa.unive.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api-opa.unive.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000166e2e52fbc0000040300483046022100f200ca044b247f6defc22fcf1128da12061a17fde17c84a322afe12c90c045c40221009c72db0a8673d74c3ef34a036a6571976008f2067e7e78110cb84b2121545a2e0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000166e2e52ff30000040300473045022045cee8726bd006abcfcf852b2011e3eeef373dfb53a94017bb1db7974215e00f0221008e69a5eed65f6a02c094c5632a9ef08ce493bf9c0ffa6ec62d8353e0f4aebfca007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000166e2e530050000040300483046022100d86dcf1dd2f923d66a67a13db8b25c201d08249fe247e2cee9b8e617f0856c28022100f3eaec578cfd3df8204df930fae0cb150324820614864c631f6893bb4340196e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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