brown.crc.med.lu.se
- Lunds universitet -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 39:7e:55:71:19:d9:8e:51:db:c2:b5:3d:73:01:8f:93 was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Lunds universitet
Organization:
Lunds universitet
State / Province:
Skåne län
Country: SE
Country: SE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 39:7e:55:71:19:d9:8e:51:db:c2:b5:3d:73:01:8f:93Serial Number (int): 76421958129514401775020285784727064467
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: db:85:60:d1:ed:8d:74:d5:19:70:04:cd:ed:c6:77:b9:db:b7:a5:7a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 58:fe:ef:cb:d7:ea:25:f2:b4:05:e7:fd:0d:5c:6f:e4:3e:f2:94:4b
Fingerprint (sha256): 08:3d:e9:87:fa:5a:02:0d:04:76:a8:65:6e:ed:dd:66:92:59:29:57:40:12:8d:a6:c2:de:11:d2:ce:23:29:d5
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate brown.crc.med.lu.se
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for brown.crc.med.lu.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
brown.crc.med.lu.se
Other certificates including the domain name lu.se
(limited to 100 certificates)
stf03.nuclear.lu.se
www.lu.se
connect.lu.se
www.lu.se
adm.rwi.lu.se
canmove-app.ekol.lu.se
moodle.nateko.lu.se
grytan.lunarc.lu.se
idpv4.lu.se
af.lu.se
lweb1122.sol.lu.se
www.lu.se
helpdesk.mhm.lu.se
rehab.adm.lu.se
lulock.luopen.lu.se
www.researchmagazine.lu.se
www.gerdahallen.lu.se
edit.info.lu.se
*.lu.se
cloud.nano.lu.se
intern.shop.lu.se
graduateland.com
jamf.esss.lu.se
crcservice.med.lu.se
www.lu.se
webmailtest.lu.se
desktop.lu.se
grub.lucas.lu.se
moodlealfa.omv.lu.se
hta-lundic.ht.lu.se
casa4.bmc.lu.se
ladoklpwlw-lnu.srv.lu.se
forvaltplan.ht.lu.se
*.gis.lu.se
workfolders.nateko.lu.se
imi-rhapsody.crc.med.lu.se
stf02.nuclear.lu.se
uportalhb-test.ldc.lu.se
www.venturelab.lu.se
www.lu.se
llasso393.srv.lu.se
monastica.ht.lu.se
ler486.srv.lu.se
lovisa.lub.lu.se
alarik.lunarc.lu.se
gernet.gerdahallen.lu.se
www.af.lu.se
grandbox.nateko.lu.se
intranet.rwi.lu.se
ipa1.lunarc.lu.se
libanswers.lub.lu.se
duo.maxlab.lu.se
jira.esss.lu.se
extern.shop.lu.se
passport.lu.se
*.gis.lu.se
intranet.rwi.lu.se
workfolders.lu.se
www.lu.se
lu.se
www.oikos.ekol.lu.se
canvas.education.lu.se
brown.crc.med.lu.se
git.ldc.lu.se
print.ehl.lu.se
ladokping-bth.srv.lu.se
jira.esss.lu.se
www.fokusforskning.lu.se
hta-lundic.ht.lu.se
extern.shop.lu.se
w-v-hdf5view-0.maxiv.lu.se
wfm423n2.srv.lu.se
kosmos.lth.se
idpv3.lu.se
gernet.gerdahallen.lu.se
kosmos.lth.se
www.gerdahallen.lu.se
whd.mhm.lu.se
dagfjarilar.lu.se
www.fokusforskning.lu.se
labguru-app.bmc.lu.se
www.jur.lu.se
venturelab.lu.se
connect.lu.se
Intranet.nateko.lu.se
citrix.med.lu.se
graduateland.com
cas.lu.se
ojstest.lub.lu.se
www.gerdahallen.lu.se
casa4.bmc.lu.se
www.gerdahallen.lu.se
exchange.lusem.lu.se
webmail.lu.se
lubas-uplan.lu.se
lms.liveatlund.lu.se
srv-ad-3.maxiv.lu.se
primweb.adm.lu.se
linteg558.srv.lu.se
connect.lu.se
www.lu.se
connect.lu.se
www.lu.se
adm.rwi.lu.se
canmove-app.ekol.lu.se
moodle.nateko.lu.se
grytan.lunarc.lu.se
idpv4.lu.se
af.lu.se
lweb1122.sol.lu.se
www.lu.se
helpdesk.mhm.lu.se
rehab.adm.lu.se
lulock.luopen.lu.se
www.researchmagazine.lu.se
www.gerdahallen.lu.se
edit.info.lu.se
*.lu.se
cloud.nano.lu.se
intern.shop.lu.se
graduateland.com
jamf.esss.lu.se
crcservice.med.lu.se
www.lu.se
webmailtest.lu.se
desktop.lu.se
grub.lucas.lu.se
moodlealfa.omv.lu.se
hta-lundic.ht.lu.se
casa4.bmc.lu.se
ladoklpwlw-lnu.srv.lu.se
forvaltplan.ht.lu.se
*.gis.lu.se
workfolders.nateko.lu.se
imi-rhapsody.crc.med.lu.se
stf02.nuclear.lu.se
uportalhb-test.ldc.lu.se
www.venturelab.lu.se
www.lu.se
llasso393.srv.lu.se
monastica.ht.lu.se
ler486.srv.lu.se
lovisa.lub.lu.se
alarik.lunarc.lu.se
gernet.gerdahallen.lu.se
www.af.lu.se
grandbox.nateko.lu.se
intranet.rwi.lu.se
ipa1.lunarc.lu.se
libanswers.lub.lu.se
duo.maxlab.lu.se
jira.esss.lu.se
extern.shop.lu.se
passport.lu.se
*.gis.lu.se
intranet.rwi.lu.se
workfolders.lu.se
www.lu.se
lu.se
www.oikos.ekol.lu.se
canvas.education.lu.se
brown.crc.med.lu.se
git.ldc.lu.se
print.ehl.lu.se
ladokping-bth.srv.lu.se
jira.esss.lu.se
www.fokusforskning.lu.se
hta-lundic.ht.lu.se
extern.shop.lu.se
w-v-hdf5view-0.maxiv.lu.se
wfm423n2.srv.lu.se
kosmos.lth.se
idpv3.lu.se
gernet.gerdahallen.lu.se
kosmos.lth.se
www.gerdahallen.lu.se
whd.mhm.lu.se
dagfjarilar.lu.se
www.fokusforskning.lu.se
labguru-app.bmc.lu.se
www.jur.lu.se
venturelab.lu.se
connect.lu.se
Intranet.nateko.lu.se
citrix.med.lu.se
graduateland.com
cas.lu.se
ojstest.lub.lu.se
www.gerdahallen.lu.se
casa4.bmc.lu.se
www.gerdahallen.lu.se
exchange.lusem.lu.se
webmail.lu.se
lubas-uplan.lu.se
lms.liveatlund.lu.se
srv-ad-3.maxiv.lu.se
primweb.adm.lu.se
linteg558.srv.lu.se
connect.lu.se
Certificate
The complete raw certificate details for brown.crc.med.lu.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHVTCCBT2gAwIBAgIQOX5VcRnZjlHbwrU9cwGPkzANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMwMTE5MDAwMDAwWhcNMjQwMTE5MjM1 OTU5WjBdMQswCQYDVQQGEwJTRTEUMBIGA1UECAwLU2vDpW5lIGzDpG4xGjAYBgNV BAoTEUx1bmRzIHVuaXZlcnNpdGV0MRwwGgYDVQQDExNicm93bi5jcmMubWVkLmx1 LnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtog/tzILHCUXmNt TPdKaxHWmOmEstjxeoFFDJChzu7fsd77PpV+JdiktnTYaN8OdLGkHXMHmFYBEvSE Rw+BhhLHxYX0Z4GhZPVVudOOtDoS1mlqpQxpiAjSQv0T+N+yaVKdozCMNy8/oFVb IXPHRTANWM5bMA9tnr70EXrv9y1CbyOkbbcafgmy9u07wsjZ6JEtDz0BcDuiBcgE 1RtXYEg0Dsir1vB4kOSQ1+lvMf9K5cEf9dBLrJ8h9R4MtQkgsvd63aZAIFlTfN0I EzjNAozmwIHxNP9+/3lBpUqG26Gfg7OBdfVSdC8DfrBjjQq1uMnM/VYU5mD06I/r +vGYwQIDAQABo4IDKDCCAyQwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5x egwwHQYDVR0OBBYEFNuFYNHtjXTVGXAEze3Gd7nbt6V6MA4GA1UdDwEB/wQEAwIF oDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJ BgNVHSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8v c2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRw Oi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsG AQUFBwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdv LmNvbS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5U Lm9jc3Auc2VjdGlnby5jb20wggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AHb/ iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABhcdqSx4AAAQDAEgwRgIh AMzh88zlTJUHqgeksYZneVpCowxTpeMnOz7+picxw4drAiEA8soHEERsQk1DaKOu Xnoz/usGnhjgQC+d4ZVPBOlEQfoAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9 pD0wSNf7qwAAAYXHakszAAAEAwBIMEYCIQDrNnINndKasxiiEAZlJtlcsABCPrZE cGMCfS5cfP719wIhAMpJ66nRSB2UEw80JobBlsYbnYt0IM+0AMyw91FnDQkiAHYA 7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGFx2pLAAAABAMARzBF AiEAtS44uoY0EhvMBb6Qy3IYpuq9jysAgeIy9uY8dHbamFYCIGVZ1nmNkyNJRqfM xvIIGXYLDXQ9BC1H3UzO2MZvFimrMB4GA1UdEQQXMBWCE2Jyb3duLmNyYy5tZWQu bHUuc2UwDQYJKoZIhvcNAQEMBQADggIBAJhkiAyS8E+HdNjU8689cfqgnzfi3KVM y6jXuO4ovYuuqBcQafYmegTYC0gKr22whl53bETsSZKl3h2GNlk2KPA2bt0YWyke jCu0sTo+L9RNSkGiQy6k6YUnAcrfuhl53mZlvs4rsbZlh6kVxyz/JMQejIlvGIvK x9s03kIqol4aETtoyjI+ObAwJlVSnCp/7N38VIqkmkFhfcc3xlUiaFplBsXZ+sMD G95C7xKzSlJV3pMaRU+7dSBVE1jNxc7SrrbqErYmG4MhzmUbotjpaDVEI+Eh91vX 0ToZg1fpLFCI1aQIkIPOsqtyRGxWblvbeXMsd4pR8v0El9WLUicwxS2RKJJEez4J A17uvyCWIDQOq2IlhXU3ZbHkyRRQmNERjRBdOFjyamZsCJRZjGYYrBvpSiiveDQm WhvjZ18WW98XcCxn3sM/NwtoMmk5Pbt+YInu8+RoRDAP6AijCPRrs+EkjZBcUtGe A9mupC9orH2Sake0cUa1iLI4jU4o6y/G2KCTu3o7ZqPQr5AOIdFHba8E8ohOQIPL hn0CH/hgK0o4MmKPn6j2wnKPSeJiAy3iCAq0Q4Y7CPLDQXMMJ7ZBCUY/uaB7XHqm hmpYtNJq9kSqI5yUMbZE7zyxIhUSeuuSyLIAVnhyYcSUNoXCOgCFRsnJ1+jS36Up QVzZN7EEOM9Z -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtog/tzILHCUXmNtTPdK axHWmOmEstjxeoFFDJChzu7fsd77PpV+JdiktnTYaN8OdLGkHXMHmFYBEvSERw+B hhLHxYX0Z4GhZPVVudOOtDoS1mlqpQxpiAjSQv0T+N+yaVKdozCMNy8/oFVbIXPH RTANWM5bMA9tnr70EXrv9y1CbyOkbbcafgmy9u07wsjZ6JEtDz0BcDuiBcgE1RtX YEg0Dsir1vB4kOSQ1+lvMf9K5cEf9dBLrJ8h9R4MtQkgsvd63aZAIFlTfN0IEzjN AozmwIHxNP9+/3lBpUqG26Gfg7OBdfVSdC8DfrBjjQq1uMnM/VYU5mD06I/r+vGY wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 76421958129514401775020285784727064467 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Skåne län' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lunds universitet' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brown.crc.med.lu.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24597794527469521779861625265878790310689021693887755044000265248093328994066849004600363957788425894975909285950219073766762623777535041040853749625860236578842140640267738116548645705596536700430872861310167246208053386186397663058528342287421087439099073852376980900396970172575635643213136748397375526439396113079586112583469553307237136742492143808072430323558659901792066537418101579981686031166115276098836831703151404617841894289388099971701649746467690864381060072587524154182852815605577498693106157673588518026867456898535874646791736411136099282610419580831876497335985068075352864395280594027680797661377 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) db8560d1ed8d74d5197004cdedc677b9dbb7a57a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brown.crc.med.lu.se' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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