lb-ces-acc.ucms.rug.nl
- Rijksuniversiteit Groningen -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 62:98:8f:58:07:8a:1f:ca:14:c7:e4:e1:f7:1c:c9:df was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Rijksuniversiteit Groningen
Organization:
Rijksuniversiteit Groningen
State / Province:
Groningen
Locality: Groningen
Country: NL
Locality: Groningen
Country: NL
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 62:98:8f:58:07:8a:1f:ca:14:c7:e4:e1:f7:1c:c9:dfSerial Number (int): 131056480068404049741198983254119336415
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: ae:c1:14:07:7f:2a:12:5b:c5:96:7f:d4:15:fc:41:e0:1a:d9:88:19
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 6b:80:bc:19:7c:e8:c6:a8:de:7a:0c:40:69:88:77:2e:96:d6:b4:b6
Fingerprint (sha256): 08:78:5b:02:bc:ff:e2:ad:32:c2:20:e7:ba:17:23:f6:41:53:f4:28:e0:ea:7b:d6:a0:ad:b3:77:bf:7a:18:51
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate lb-ces-acc.ucms.rug.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lb-ces-acc.ucms.rug.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lb-ces-acc.ucms.rug.nl
Other certificates including the domain name rug.nl
(limited to 100 certificates)
webhost12.service.rug.nl
fssc.gai.rug.nl
ag.id.rug.nl
molgenis21.gcc.rug.nl
menu.ub.rug.nl
*.test.euclid.astro.rug.nl
sandbox-ssh.web.rug.nl
registry.webhosting.rug.nl
signon.rug.nl
molgenis104.gcc.rug.nl
rooster.rug.nl
fwn-biol-144-174.biol.rug.nl
topdesk.service.rug.nl
russischcentrum.ub.rug.nl
pan-209.nema.rug.nl
es-testdev01.ucms.rug.nl
dnpprepo.ub.rug.nl
test-sp.ucms.rug.nl
molgenis114.gcc.rug.nl
mijnrugpas.rug.nl
iwi232.iwinet.rug.nl
molgenis53.target.rug.nl
www.let.rug.nl
toptst01.serverspace.rug.nl
geo-test.rug.nl
cfs001.workspace.rug.nl
rabbitmq.web.rug.nl
molgenis14.target.rug.nl
monk.hpc.rug.nl
molgenis112.gcc.rug.nl
molgenis66.gcc.rug.nl
tst-idp.id.rug.nl
wordrobe.housing.rug.nl
new.tweets.dnpp.ub.rug.nl
gaiisap1.rcbiv.rug.nl
streaming13.serverspace.rug.nl
gaiisap1.rcbiv.rug.nl
doi.ub.rug.nl
molgenis113.gcc.rug.nl
webhost-ng.service.rug.nl
flexo.gcc.rug.nl
healthpsychology.cmb.med.rug.nl
apodat.iadb.nl
webhost3.service.rug.nl
survey.ai.rug.nl
acc-ugp.ub.rug.nl
examspace.vpn.rug.nl
molgenis109.gcc.rug.nl
meet.web.rug.nl
mypc1.service.rug.nl
molgenis70.gcc.rug.nl
share.ub.rug.nl
urd2.let.rug.nl
student.rug.nl
web2-prod.gai.rug.nl
profiling.hpc.rug.nl
mijnrugpas.rug.nl
orbishistorical.ub.rug.nl
rechtenscripties.eprints.rieven.ub.rug.nl
pmb.let.rug.nl
beaker.service.rug.nl
rng.gmw.rug.nl
trr-ev.id.rug.nl
xfactor.rug.nl
wencke4.housing.rug.nl
ads005.workspace.rug.nl
molgenis13.gcc.rug.nl
molgenis60.target.rug.nl
oasback.gai.rug.nl
libcal.rug.nl
molgenis01.gcc.rug.nl
acc-vvd.ub.rug.nl
pwstst.gai.rug.nl
horafinita.rug.nl
archresc2.service.rug.nl
cit-toasta1.serverspace.rug.nl
lb-ces-acc.ucms.rug.nl
pan.service.rug.nl
ocmp.phys.rug.nl
depa-images.ub.rug.nl
signal.web.rug.nl
chat.astro.rug.nl
rugpasfoto.webhosting.rug.nl
git.lwp.rug.nl
edusupport.rug.nl
gadgets.rug.nl
ocmp.phys.rug.nl
zabbix-cit.service.rug.nl
scoop-portal.data.rug.nl
test-pure-form.ub.rug.nl
bi.gai.rug.nl
molgenis97.gcc.rug.nl
molgenis04.target.rug.nl
mailserver.astro.rug.nl
poewaai.ub.rug.nl
personeel.ub.rug.nl
rl01.gai.rug.nl
dzn.eldoc.ub.rug.nl
support.horafinita.ub.rug.nl
urendeclaratie.gai.rug.nl
fssc.gai.rug.nl
ag.id.rug.nl
molgenis21.gcc.rug.nl
menu.ub.rug.nl
*.test.euclid.astro.rug.nl
sandbox-ssh.web.rug.nl
registry.webhosting.rug.nl
signon.rug.nl
molgenis104.gcc.rug.nl
rooster.rug.nl
fwn-biol-144-174.biol.rug.nl
topdesk.service.rug.nl
russischcentrum.ub.rug.nl
pan-209.nema.rug.nl
es-testdev01.ucms.rug.nl
dnpprepo.ub.rug.nl
test-sp.ucms.rug.nl
molgenis114.gcc.rug.nl
mijnrugpas.rug.nl
iwi232.iwinet.rug.nl
molgenis53.target.rug.nl
www.let.rug.nl
toptst01.serverspace.rug.nl
geo-test.rug.nl
cfs001.workspace.rug.nl
rabbitmq.web.rug.nl
molgenis14.target.rug.nl
monk.hpc.rug.nl
molgenis112.gcc.rug.nl
molgenis66.gcc.rug.nl
tst-idp.id.rug.nl
wordrobe.housing.rug.nl
new.tweets.dnpp.ub.rug.nl
gaiisap1.rcbiv.rug.nl
streaming13.serverspace.rug.nl
gaiisap1.rcbiv.rug.nl
doi.ub.rug.nl
molgenis113.gcc.rug.nl
webhost-ng.service.rug.nl
flexo.gcc.rug.nl
healthpsychology.cmb.med.rug.nl
apodat.iadb.nl
webhost3.service.rug.nl
survey.ai.rug.nl
acc-ugp.ub.rug.nl
examspace.vpn.rug.nl
molgenis109.gcc.rug.nl
meet.web.rug.nl
mypc1.service.rug.nl
molgenis70.gcc.rug.nl
share.ub.rug.nl
urd2.let.rug.nl
student.rug.nl
web2-prod.gai.rug.nl
profiling.hpc.rug.nl
mijnrugpas.rug.nl
orbishistorical.ub.rug.nl
rechtenscripties.eprints.rieven.ub.rug.nl
pmb.let.rug.nl
beaker.service.rug.nl
rng.gmw.rug.nl
trr-ev.id.rug.nl
xfactor.rug.nl
wencke4.housing.rug.nl
ads005.workspace.rug.nl
molgenis13.gcc.rug.nl
molgenis60.target.rug.nl
oasback.gai.rug.nl
libcal.rug.nl
molgenis01.gcc.rug.nl
acc-vvd.ub.rug.nl
pwstst.gai.rug.nl
horafinita.rug.nl
archresc2.service.rug.nl
cit-toasta1.serverspace.rug.nl
lb-ces-acc.ucms.rug.nl
pan.service.rug.nl
ocmp.phys.rug.nl
depa-images.ub.rug.nl
signal.web.rug.nl
chat.astro.rug.nl
rugpasfoto.webhosting.rug.nl
git.lwp.rug.nl
edusupport.rug.nl
gadgets.rug.nl
ocmp.phys.rug.nl
zabbix-cit.service.rug.nl
scoop-portal.data.rug.nl
test-pure-form.ub.rug.nl
bi.gai.rug.nl
molgenis97.gcc.rug.nl
molgenis04.target.rug.nl
mailserver.astro.rug.nl
poewaai.ub.rug.nl
personeel.ub.rug.nl
rl01.gai.rug.nl
dzn.eldoc.ub.rug.nl
support.horafinita.ub.rug.nl
urendeclaratie.gai.rug.nl
Certificate
The complete raw certificate details for lb-ces-acc.ucms.rug.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHCDCCBPCgAwIBAgIQYpiPWAeKH8oUx+Th9xzJ3zANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjEwNTExMDAwMDAwWhcNMjIwNTExMjM1 OTU5WjB8MQswCQYDVQQGEwJOTDESMBAGA1UECBMJR3JvbmluZ2VuMRIwEAYDVQQH EwlHcm9uaW5nZW4xJDAiBgNVBAoTG1JpamtzdW5pdmVyc2l0ZWl0IEdyb25pbmdl bjEfMB0GA1UEAxMWbGItY2VzLWFjYy51Y21zLnJ1Zy5ubDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAN/LMU/VLbiugtr+WecgW9AM8cEZua0pMMI4HjHU jQontheaafenosUK5qf/K0ZPNOC+NfoyKjbjoX/vgNOuLV1Ms2GIe2adP9PaqPrL 4Q+hlmLk5P30M/XRsosuRJqryL5Mrqz9ozFREtJ8N9YGYIBm/KtdNXBblu0zPsU1 z9v6lQWpdjhJuiEa5MG8Fr5QKqTRxydy1R7kSv22yy9E48PlPyax0LSXWDdZRpRS MhBy+3ynhGoIxw2NJNfEir2+/nSU8ntvioBkPbxkT1DqZ4YCWhjBVPE5QiWy4aPu wU4Ur5rS1dDjxhIryft87UhbiQW/B6tRnGkRAFG7cSLxY+WUS4wYyTXPTsmEXrOs 7U74+/1G4vq3wy8UGFF0id2861NclKrGPLTGb5N023MnlMSmD5qsRUVYp5jkmoTe fEedxoF+RLBRu1RgsmYTVznprvt0YuBkZvaYsSPHLmLvdVpjciN28+qY63RLluAL ovOn5MmhwdLN+Vndebf1on4zOdVF9foNGD5iHKXpCYjew065YJ1OuNtXhQgSODlW T/8aAq0Xk0Lp696pZa2dC4OPsvIFQKU3YEuTUGmpyMnFo98WaNXPtUU5vSjmef6R 6DQYbEG2MZGkPm8PTICdqLvK+CUEKhjA6Hd4QUNQx8G6u9Ne+cJwZVF0Rik7vY7H /SXZAgMBAAGjggG8MIIBuDAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6 DDAdBgNVHQ4EFgQUrsEUB38qElvFln/UFfxB4BrZiBkwDgYDVR0PAQH/BAQDAgWg MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkG A1UdIARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9z ZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6 Ly9HRUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYB BQUHAQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28u Y29tL0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQu b2NzcC5zZWN0aWdvLmNvbTATBgorBgEEAdZ5AgQDAQH/BAIFADAhBgNVHREEGjAY ghZsYi1jZXMtYWNjLnVjbXMucnVnLm5sMA0GCSqGSIb3DQEBDAUAA4ICAQA+7EVo PwOnvvLfG3XreSbM6cJHm5cEDdEmhO1wZ3NLNTVx0paNS4GiOIeLd1wa+5D7ECtW U10jE8s/+2cm5zE4nxBA3aOyba/cbsG2w79R9QvYASc4pl4aG0Tk6eck35hRjYYu Ju6GUPeCKPgnjptaWPEW0cqi7huxg45mjyQHeCT4ra65fZlZSGEt1ZufVMWAvWJ5 XrN/EPtAThai7q36Ez7xu/KtrA+Vu2/tVUSi69DsIyb1j6HBFCY+nC8RAQ7bLD+K zGH63lpcrvGuQRkk7RewIVMfh1UngtOzu9+3oWy0yArOgcfd1FBStDqq5wzy+b/u VU5SG8z6qdei9DAyjrgA/BP6W/sIig8nC6tYa1oO+a454IFd78XTG5q0ioXxdFKE LNcIDwy7Lh7/htLPH57K60g/A+7AgGHDWFiqPPAbO77kG1Yg1YmxRQXSKO8G2M0a zFFC9o7tQruuRRi3iVnFs108X2LHl+v9mLqHQQZ0RnF7evBT35VtmNIP0xoSTSlD i93jxNORO+L0TT2jTTaQrl/Qheoc3TWxlAMUCUCcIxz3SBR0U3UCaV4QdGaOW9N/ 6KAy60ViS7hjrcaf4BwTklco6IzS0x9wQWsdAfUcQXAXKMb/7PtTshZHxBX4OEeR PLWV56Jq75Lv0DTmyCmFBkR9s4j+QYKRcYiLXQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA38sxT9UtuK6C2v5Z5yBb 0AzxwRm5rSkwwjgeMdSNCie2F5pp96eixQrmp/8rRk804L41+jIqNuOhf++A064t XUyzYYh7Zp0/09qo+svhD6GWYuTk/fQz9dGyiy5EmqvIvkyurP2jMVES0nw31gZg gGb8q101cFuW7TM+xTXP2/qVBal2OEm6IRrkwbwWvlAqpNHHJ3LVHuRK/bbLL0Tj w+U/JrHQtJdYN1lGlFIyEHL7fKeEagjHDY0k18SKvb7+dJTye2+KgGQ9vGRPUOpn hgJaGMFU8TlCJbLho+7BThSvmtLV0OPGEivJ+3ztSFuJBb8Hq1GcaREAUbtxIvFj 5ZRLjBjJNc9OyYRes6ztTvj7/Ubi+rfDLxQYUXSJ3bzrU1yUqsY8tMZvk3TbcyeU xKYPmqxFRVinmOSahN58R53GgX5EsFG7VGCyZhNXOemu+3Ri4GRm9pixI8cuYu91 WmNyI3bz6pjrdEuW4Aui86fkyaHB0s35Wd15t/WifjM51UX1+g0YPmIcpekJiN7D TrlgnU6421eFCBI4OVZP/xoCrReTQunr3qllrZ0Lg4+y8gVApTdgS5NQaanIycWj 3xZo1c+1RTm9KOZ5/pHoNBhsQbYxkaQ+bw9MgJ2ou8r4JQQqGMDod3hBQ1DHwbq7 0175wnBlUXRGKTu9jsf9JdkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 131056480068404049741198983254119336415 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksuniversiteit Groningen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lb-ces-acc.ucms.rug.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912998727109121306887128516999732438534838573247563107861739974720747690391643839127052287829849833404576970685492601184820937369922242691190708003697114378362611908718325993121555189250611691713495125859043644541635519674313705111262589099236507333933492696731996934910103978139991940898494050868099192326216598073701935630900714476758331068015357253608236575409974048860885054145293429192685622421366830486830216116587337294307067550777175883052364584623801531125989965975244711234569259987222724277642832686673112403645680763833824124469360433700507190656911623324107307106939523499001915568270300227618812757680259463064934531273170549205372133960733913701159325414041053097699370532249959940289449000449765537625960451649052051488818945286134970676098448949600240933239789508843265723672511821406851298832321115346924425446981183847575685887542667655411800701974295693589794371439968519415390218596394598809974899049057756239186925030024359088757242598604335924921111649132132425529980069549062199338552837950302047501088776886495685259169870929976475498526997465630647350780923471615991722264128739589721487969161513307388078789493027516938178698877691075107626262886521106676811238674877751993860994698889463815099796024010201 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aec114077f2a125bc5967fd415fc41e01ad98819 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb-ces-acc.ucms.rug.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 003eec45683f03a7bef2df1b75eb7926cce9c2479b97040dd12684ed7067734b353571d2968d4b81a238878b775c1afb90fb102b56535d2313cb3ffb6726e731389f1040dda3b26dafdc6ec1b6c3bf51f50bd8012738a65e1a1b44e4e9e724df98518d862e26ee8650f78228f8278e9b5a58f116d1caa2ee1bb1838e668f24077824f8adaeb97d995948612dd59b9f54c580bd62795eb37f10fb404e16a2eeadfa133ef1bbf2adac0f95bb6fed5544a2ebd0ec2326f58fa1c114263e9c2f11010edb2c3f8acc61fade5a5caef1ae411924ed17b021531f87552782d3b3bbdfb7a16cb4c80ace81c7ddd45052b43aaae70cf2f9bfee554e521bccfaa9d7a2f430328eb800fc13fa5bfb088a0f270bab586b5a0ef9ae39e0815defc5d31b9ab48a85f17452842cd7080f0cbb2e1eff86d2cf1f9ecaeb483f03eec08061c35858aa3cf01b3bbee41b5620d589b14505d228ef06d8cd1acc5142f68eed42bbae4518b78959c5b35d3c5f62c797ebfd98ba8741067446717b7af053df956d98d20fd31a124d29438bdde3c4d3913be2f44d3da34d3690ae5fd085ea1cdd35b194031409409c231cf7481474537502695e1074668e5bd37fe8a032eb45624bb863adc69fe01c13925728e88cd2d31f70416b1d01f51c41701728c6ffecfb53b21647c415f83847913cb595e7a26aef92efd034e6c8298506447db388fe41829171888b5d