hvacms-prd-fe.lb.hva.nl

- Stichting Hogeschool van Amsterdam -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number f6:aa:35:23:32:6f:17:ea:74:91:71:e3:f4:c7:cb:ac was issued on by GEANT Vereniging.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Hogeschool van Amsterdam

Organization: Stichting Hogeschool van Amsterdam
State / Province: Noord-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): f6:aa:35:23:32:6f:17:ea:74:91:71:e3:f4:c7:cb:ac
Serial Number (int): 327873855185343461165382322711695969196
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c5:35:50:a8:90:1d:b3:d6:4d:c6:ca:26:8e:e7:b6:5f:8d:a4:f0:47
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): c9:7e:88:dc:c5:ac:67:41:08:48:6b:91:e5:dc:a6:bb:10:8c:f8:aa
Fingerprint (sha256): 0b:9f:09:62:d1:8a:9e:c8:19:c6:9f:58:16:60:d9:59:85:bd:00:9a:43:8a:7b:ee:f6:1a:12:98:35:0e:5c:cd

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate hvacms-prd-fe.lb.hva.nl

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hvacms-prd-fe.lb.hva.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hvacms-prd-fe.lb.hva.nl
amsterdamuas.com
az.hva.nl
bib.hva.nl
bibliotheek.hva.nl
circollab.nl
draadloos.hva.nl
hogeschoolvanamsterdam.eu
hogeschoolvanamsterdam.nl
hogeschoolvanamsterdam.org
hva.nl
jong.hva.nl
lerarenopleidingenamsterdam.nl
medewerker.hva.nl
ot-euromaster.eu
ot-euromaster.nl
sport-studies.com
sport-studies.nl
static.cms.hva.nl
static.hva.nl
student.amsterdamuas.com
student.hva.nl
studiekeuzetraject.nl
studiekeuzetrajecten.nl
support.hva.nl
taalenschakel.nl
taalwinkel.nl
urbansos.eu
ureka.eu
webcolleges.hva.nl
www-prd.cms.hva.nl
www.amsib.com
www.amsib.eu
www.amsib.nl
www.amstelcampus.com
www.amsterdamuas.com
www.archiefschool.nl
www.bib.hva.nl
www.bibliotheek.hva.nl
www.circollab.nl
www.cms.hva.nl
www.hogeschoolvanamsterdam.eu
www.hogeschoolvanamsterdam.nl
www.hogeschoolvanamsterdam.org
www.hva.nl
www.lerarenopleidingenamsterdam.nl
www.orientatiejaar.nl
www.ot-euromaster.eu
www.ot-euromaster.nl
www.studiekeuzetraject.nl
www.studiekeuzetrajecten.nl
www.taalenschakel.nl
www.taalwinkel.nl
www.topcoach5.nl
www.urbansos.eu
www.ureka.eu
www.werkenbijdehva.nl

Other certificates including the domain name hva.nl

(limited to 100 certificates)
*.medialab.hva.nl
edit-intra.dbsv.hva.nl
projectonline.dmci.hva.nl
acc-moodle.ict.hva.nl
mobiusportal.uva.dev.icts.education
acc-login.hva.nl
onderwijsconferentie.hva.nl
resultaten.hva.nl
rbs.iscb.hva.nl
fbe-magazines.hva.nl
mi.hva.nl
acc-mi.hva.nl
gitlab.techniek.hva.nl
campus.dmci.hva.nl
stage.centuri.hva.nl
incapsula.com
stagedbsv.hva.nl
teams-prd-sbc1.hva.nl
roosterportal.hva.nl
edulab.fbe.hva.nl
unixbeheer.forux.nl
incapsula.com
rooster.hva.nl
openid.hva.nl
hva.nl
secure-apis.hva.nl
moodle.cmd.hva.nl
asl.techniek.hva.nl
prdcltech0003.ict.hva.nl
intra.sem.hva.nl
webdav-intra.doo.hva.nl
databanken.bibliotheek.hva.nl
ontw-intra.mim.hva.nl
pure.hva.nl
gartnerportal.uva.prd.icts.education
roosterportal.hva.nl
legacy.hva.nl
declaraties.hva.nl
api.declaraties-acc.hva.nl
cl.acc.hvaweb.formist.nl
id.hva.prd.icts.education
apps.hva.nl
moodle-prd-fdmci.lb.hva.nl
edulab.fbe.hva.nl
incapsula.com
login.hva.nl
sis.hva.nl
incapsula.com
onderwijslab.techniek.hva.nl
*.acceptatie.hva.nl
prdcltech0004.ict.hva.nl
intra.alo.hva.nl
ex2016-prd-hva.lb.uva.nl
incapsula.com
edit-intra.iam.hva.nl
devarchief.roxen.hva.nl
incapsula.com
sis.hva.nl
acc-moodle.ict.hva.nl
hvacms-acc-redactie.lb.uva.nl
recovery.ict.hva.nl
rps.hva.nl
aanmelden.hva.nl
hvacms-prd-www.lb.uva.nl
campuscreators.nl
www.excellentieprogramma.hva.nl
gartnerportal3.uva.dev.icts.education
ac.hva.nl
hva.nl
gitlab.dmci.hva.nl
idm-acc-conhva1.acc-ad.hva.nl
login.hva.nl
sis.hva.nl
mapleta-oefen.hva.nl
curriculum.techniek.hva.nl
www.lustrum.hva.nl
wivlog.ict.hva.nl
incapsula.com
vpxldaps.ad.hva.nl
hvacms-prd-redactie.lb.uva.nl
sis.hva.nl
gitlab.techniek.hva.nl
incapsula.com
hvacms-prd-fe.lb.hva.nl
moodle-dev-fdmci.lb.hva.nl
edit-hva-instituten.hva.nl
salto-acc-hva1.ad.hva.nl
stage.centuri.hva.nl
bscw.hva.nl
discord.informatica.hva.nl
tijdreg.hva.nl
*.acc-blogs.dmci.hva.nl
beheervpn-prd.net.uha.nl
intra.si.hva.nl
lyndaportal.fdmci.hva.nl
dlwo.dmci.hva.nl
vpn.hva.nl
asl.techniek.hva.nl
api.payment-acc.ict.hva.nl
login.hva.nl

Certificate

The complete raw certificate details for hvacms-prd-fe.lb.hva.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILZTCCCU2gAwIBAgIRAPaqNSMybxfqdJFx4/THy6wwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIyMDYyMDAwMDAwMFoXDTIzMDYyMDIz
NTk1OVowdDELMAkGA1UEBhMCTkwxFjAUBgNVBAgTDU5vb3JkLUhvbGxhbmQxKzAp
BgNVBAoTIlN0aWNodGluZyBIb2dlc2Nob29sIHZhbiBBbXN0ZXJkYW0xIDAeBgNV
BAMTF2h2YWNtcy1wcmQtZmUubGIuaHZhLm5sMIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEAykSnnQHiEd4+WKZu42ktULox903x+YmCqJoViqpBj0kpx6u7
eNIfPBkgHmGTeb6DcISx0uW+iuAo8kx25/sftn/AUbKC1i29y96qJyHtncdYEUWM
0MacMexuehcCuBWKXxUY0KC9nQcadlNGHuk0nJU7owNPNJ2sGG3BPfDxxyh+l17l
trifB7bDGlWEo74vNQUeZOVzQ0Uv6MCHFz8tFO+t5KvvdBYQEQ532pw2Vt4aj5cs
Z6akd0dZ0ziS1FHtCphtNkXLYiivaBhH3eWxxgb/NPsC24pz9h9nPz+JbDYyxDmr
aetL30S1CWuyn8mfM0FsruQWrucklGvvPfTFLznqklRiduJ4dIA6o2JFKYKerQ5b
CN0wxSohVQYSQFopaG+K4DOIDNQAre48v3vF0MlgngesLfcz/wa+kr5HP7wYJzqf
GaGBJE2ONDF7gNtWCcSvxtZtTeYOez9P5R1i8hp++5mxyJrCZundEaoU6zLAKawk
nB6NGRZo3yS2/yzjuFJTwo4/37z5mftPXmYb71HZAP4DYRsImRJ2KmbXZ7arLee2
WuWSXnekE1DMAwWNtmHfiX95ukOHaD2YwRb2/L1p5S/grAkOfPW1/3DPrYKwHfKa
jeP/Gmk6ejtYk4pP+IWNoE+ksz4mb0u/MBCMU3SRY5nghRCemhpvmieKlLcCAwEA
AaOCBiAwggYcMB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1Ud
DgQWBBTFNVCokB2z1k3GyiaO57ZfjaTwRzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T
AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIw
QDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28u
Y29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5U
LmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRp
MGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VB
TlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNl
Y3RpZ28uY29tMBMGCisGAQQB1nkCBAMBAf8EAgUAMIIEgwYDVR0RBIIEejCCBHaC
F2h2YWNtcy1wcmQtZmUubGIuaHZhLm5sghBhbXN0ZXJkYW11YXMuY29tgglhei5o
dmEubmyCCmJpYi5odmEubmyCEmJpYmxpb3RoZWVrLmh2YS5ubIIMY2lyY29sbGFi
Lm5sghBkcmFhZGxvb3MuaHZhLm5sghlob2dlc2Nob29sdmFuYW1zdGVyZGFtLmV1
ghlob2dlc2Nob29sdmFuYW1zdGVyZGFtLm5sghpob2dlc2Nob29sdmFuYW1zdGVy
ZGFtLm9yZ4IGaHZhLm5sggtqb25nLmh2YS5ubIIebGVyYXJlbm9wbGVpZGluZ2Vu
YW1zdGVyZGFtLm5sghFtZWRld2Vya2VyLmh2YS5ubIIQb3QtZXVyb21hc3Rlci5l
dYIQb3QtZXVyb21hc3Rlci5ubIIRc3BvcnQtc3R1ZGllcy5jb22CEHNwb3J0LXN0
dWRpZXMubmyCEXN0YXRpYy5jbXMuaHZhLm5sgg1zdGF0aWMuaHZhLm5sghhzdHVk
ZW50LmFtc3RlcmRhbXVhcy5jb22CDnN0dWRlbnQuaHZhLm5sghVzdHVkaWVrZXV6
ZXRyYWplY3QubmyCF3N0dWRpZWtldXpldHJhamVjdGVuLm5sgg5zdXBwb3J0Lmh2
YS5ubIIQdGFhbGVuc2NoYWtlbC5ubIINdGFhbHdpbmtlbC5ubIILdXJiYW5zb3Mu
ZXWCCHVyZWthLmV1ghJ3ZWJjb2xsZWdlcy5odmEubmyCEnd3dy1wcmQuY21zLmh2
YS5ubIINd3d3LmFtc2liLmNvbYIMd3d3LmFtc2liLmV1ggx3d3cuYW1zaWIubmyC
FHd3dy5hbXN0ZWxjYW1wdXMuY29tghR3d3cuYW1zdGVyZGFtdWFzLmNvbYIUd3d3
LmFyY2hpZWZzY2hvb2wubmyCDnd3dy5iaWIuaHZhLm5sghZ3d3cuYmlibGlvdGhl
ZWsuaHZhLm5sghB3d3cuY2lyY29sbGFiLm5sgg53d3cuY21zLmh2YS5ubIIdd3d3
LmhvZ2VzY2hvb2x2YW5hbXN0ZXJkYW0uZXWCHXd3dy5ob2dlc2Nob29sdmFuYW1z
dGVyZGFtLm5sgh53d3cuaG9nZXNjaG9vbHZhbmFtc3RlcmRhbS5vcmeCCnd3dy5o
dmEubmyCInd3dy5sZXJhcmVub3BsZWlkaW5nZW5hbXN0ZXJkYW0ubmyCFXd3dy5v
cmllbnRhdGllamFhci5ubIIUd3d3Lm90LWV1cm9tYXN0ZXIuZXWCFHd3dy5vdC1l
dXJvbWFzdGVyLm5sghl3d3cuc3R1ZGlla2V1emV0cmFqZWN0Lm5sght3d3cuc3R1
ZGlla2V1emV0cmFqZWN0ZW4ubmyCFHd3dy50YWFsZW5zY2hha2VsLm5sghF3d3cu
dGFhbHdpbmtlbC5ubIIQd3d3LnRvcGNvYWNoNS5ubIIPd3d3LnVyYmFuc29zLmV1
ggx3d3cudXJla2EuZXWCFXd3dy53ZXJrZW5iaWpkZWh2YS5ubDANBgkqhkiG9w0B
AQwFAAOCAgEACHKQ1yZYwn6ENI4bWP8ATqH3LdDcTVqez1Qjf5A7zxI/N3k9uwhg
s6HAsWhvc9Tru52g273oGHmV6Efkd/EOAvJzZuW0ngKoEBw2ixhQxBhVsQPsChAm
PVeyT6fKOBjPbDXfPn+eJyBJEFyUn45M43cYpKgu9R/rxJ0wIZq9IvfjNZXC6KP0
tUr1Xx5BiliHvziASv14iOceS2trPcbojOXn9eT6tuc28jj4a0FcECegRFR/OqQW
8wtEQQEtAUpUAYFDps1y3OcwwGLfjfotXZquOMn7GTlN9P1xhQyzPgYwBHjP2yMd
3gSeFwjD+nipl/LKCwk5vs1MtjzDI+u3r/lhOs02LrJBy1BBPz9QSz10ln/DX5w6
rNfMeExpustFy8gPR9RlzXCy2scpOA3CXB3B5+6FhXahTh38u9KQR2+FxVQzTtsa
lPisen038qgkaosKYtScIKFEI/8DhcWzsn+ejh/x1cRm72MtlhCs2ciDg47qGl5R
vNLwHdc3NVp6/X734e4Ew+lCcfx8RgEWo2TPgxz9o4N1tCUxBbN0t/wpNwV386HM
HyXKfWM4Xyx05SvZeR2Goy+WWFQZMAt23BaPUyE1B3MrFR5p9XAxY7SGrzzTyLb/
JRH7rkGkGJAxp46Ou4eLsSL4etPNSC7zB/h3gmM+6S4WZKrkUsM7OPg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAykSnnQHiEd4+WKZu42kt
ULox903x+YmCqJoViqpBj0kpx6u7eNIfPBkgHmGTeb6DcISx0uW+iuAo8kx25/sf
tn/AUbKC1i29y96qJyHtncdYEUWM0MacMexuehcCuBWKXxUY0KC9nQcadlNGHuk0
nJU7owNPNJ2sGG3BPfDxxyh+l17ltrifB7bDGlWEo74vNQUeZOVzQ0Uv6MCHFz8t
FO+t5KvvdBYQEQ532pw2Vt4aj5csZ6akd0dZ0ziS1FHtCphtNkXLYiivaBhH3eWx
xgb/NPsC24pz9h9nPz+JbDYyxDmraetL30S1CWuyn8mfM0FsruQWrucklGvvPfTF
LznqklRiduJ4dIA6o2JFKYKerQ5bCN0wxSohVQYSQFopaG+K4DOIDNQAre48v3vF
0MlgngesLfcz/wa+kr5HP7wYJzqfGaGBJE2ONDF7gNtWCcSvxtZtTeYOez9P5R1i
8hp++5mxyJrCZundEaoU6zLAKawknB6NGRZo3yS2/yzjuFJTwo4/37z5mftPXmYb
71HZAP4DYRsImRJ2KmbXZ7arLee2WuWSXnekE1DMAwWNtmHfiX95ukOHaD2YwRb2
/L1p5S/grAkOfPW1/3DPrYKwHfKajeP/Gmk6ejtYk4pP+IWNoE+ksz4mb0u/MBCM
U3SRY5nghRCemhpvmieKlLcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327873855185343461165382322711695969196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Hogeschool van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hvacms-prd-fe.lb.hva.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825182191195966073684948276748333308895361593512293568731395812560754766725331845595753052406368308826212186763407284162522198801635875288085543239563147237044973950999983834636939299048557729425077561906122679937907412592214709624859401733757569321844704664102725409337559080207101944695119610940198032297972501008826201272137255141767494761594589744860557744671112957271762272070904705983146092309248674320754927155852731417060924746216513454319592389313850946650699821627746106544243858428079488544225124103671521534328906902198483232871434018484704852695809677213898219452437497929780640296607335685924105857612676373719652560928730255458142405658869104116125758861280472184527136119370715844530852774728974993747594438047415139164273828205732291287505817133809565950053329431353363628281153805920529435429126345395069181117791131489646333401585265468870557656862244182802439773335522084695337421880152217022281547946320194732340009722480465942310102504130252007691920499591758611356392369313611465675417893073839870306358452777842980668581220137979168438279974030050918870789967808608886012638138988762564106781121382537243109659814296801600398107294907904673721794714978422913895298792548032728541003487704234168566134887584951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c53550a8901db3d64dc6ca268ee7b65f8da4f047
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacms-prd-fe.lb.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsterdamuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bib.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotheek.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circollab.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draadloos.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hogeschoolvanamsterdam.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hogeschoolvanamsterdam.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hogeschoolvanamsterdam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jong.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerarenopleidingenamsterdam.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medewerker.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ot-euromaster.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ot-euromaster.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport-studies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport-studies.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.amsterdamuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiekeuzetraject.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiekeuzetrajecten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taalenschakel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taalwinkel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbansos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ureka.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcolleges.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prd.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsib.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsib.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amstelcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsterdamuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archiefschool.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bib.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bibliotheek.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circollab.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hogeschoolvanamsterdam.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hogeschoolvanamsterdam.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hogeschoolvanamsterdam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lerarenopleidingenamsterdam.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orientatiejaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ot-euromaster.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ot-euromaster.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studiekeuzetraject.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studiekeuzetrajecten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taalenschakel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taalwinkel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topcoach5.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urbansos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ureka.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werkenbijdehva.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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