planon.zuyd.nl
- Stichting Zuyd Hogeschool -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 70:0f:a5:9b:18:63:b6:98:da:00:35:37:43:8a:80:3c was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Stichting Zuyd Hogeschool
Organization:
Stichting Zuyd Hogeschool
State / Province:
Limburg
Country: NL
Country: NL
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 70:0f:a5:9b:18:63:b6:98:da:00:35:37:43:8a:80:3cSerial Number (int): 148954778866286578598414351920823697468
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: ad:54:74:8f:51:9c:08:4b:e0:32:88:04:7f:3f:c2:28:9c:2e:f0:0b
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 4a:92:c4:33:b0:1a:b6:35:56:10:19:10:8d:28:12:8f:e8:6d:79:03
Fingerprint (sha256): 0e:d9:18:32:da:38:c5:e6:86:d3:38:b1:ff:93:d5:37:cf:01:cd:9e:59:76:6d:8f:9f:cb:10:b5:19:22:ab:65
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate planon.zuyd.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for planon.zuyd.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
planon.zuyd.nl
Other certificates including the domain name zuyd.nl
(limited to 100 certificates)
desktop.zuyd.nl
print.zuyd.nl
gitlab.services.zuyd.nl
vpn.zuyd.nl
moodle.zuyd.nl
guest-networkaccess.zuyd.nl
osiris-basis.zuyd.nl
osirisdocent.zuyd.nl
account.zuyd.nl
icto.community.zuyd.nl
dataintelligence.zuyd.nl
managementinfo.zuyd.nl
tol.zuyd.nl
regularstudent.zuyd.nl
events-api.zuyd.nl
rbs.services.zuyd.nl
hybrid.zuyd.nl
idservice.zuyd.nl
planon.zuyd.nl
osiris.zuyd.nl
*.test.zuyd.nl
qmp.zuyd.nl
account.zuyd.nl
tol.zuyd.nl
sd.zuyd.nl
community.zuyd.nl
osirisacc-cursusinvoer.test.zuyd.nl
gateway.services.zuyd.nl
vpn.zuyd.nl
cardsonline.zuyd.nl
managementinfo.zuyd.nl
magic.zuyd.nl
exchangestudent.zuyd.nl
acceptatie.zuyd.nl
betalen.zuyd.nl
hybrid.zuyd.nl
direct-access.zuyd.nl
moodle.zuyd.nl
crmzuyd.nl
www.zuyd.nl
desktop.zuyd.nl
print.zuyd.nl
sorry.zuyd.nl
account.zuyd.nl
*.community.zuyd.nl
telefonie.zuyd.nl
covoordummies.zuyd.nl
alumni.zuyd.nl
crmzuyd.nl
exchangestudent.zuyd.nl
desktop.zuyd.nl
redirects.zuyd.nl
centralerepro.zuyd.nl
dynamics.zuyd.nl
vpn.zuyd.nl
desktop.zuyd.nl
vpn.zuyd.nl
rooster.zuyd.nl
exchangestudent.zuyd.nl
webvpn.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
osirissup-basis.test.zuyd.nl
blackboard.zuyd.nl
sts.zuyd.nl
api.zuyd.nl
crmzuyd.nl
cardsonline.zuyd.nl
osirisprj-basis.test.zuyd.nl
help.zuyd.nl
gateway.services.zuyd.nl
sts.zuyd.nl
hotelschool.zuyd.nl
www.zuyd.nl
covoordummies.zuyd.nl
facilitynet.zuyd.nl
netlab.ict.zuyd.nl
*.test.zuyd.nl
covoordummies.zuyd.nl
digitaledidactiek.zuyd.nl
rbs.services.zuyd.nl
facilitynet.zuyd.nl
osiris-basis.zuyd.nl
magic.zuyd.nl
test.crm.server11m.eyehost.eu
rbs.services.zuyd.nl
dataintelligence.zuyd.nl
print.zuyd.nl
crmzuyd.nl
sorry.zuyd.nl
crmzuyd.nl
www.zuyd.nl
crmzuyd.nl
covoordummies.zuyd.nl
covoordummies.zuyd.nl
crmzuyd.nl
crmzuyd.nl
uaportal.hszuyd.nl
garfield.services.zuyd.nl
netdb.services.zuyd.nl
print.zuyd.nl
gitlab.services.zuyd.nl
vpn.zuyd.nl
moodle.zuyd.nl
guest-networkaccess.zuyd.nl
osiris-basis.zuyd.nl
osirisdocent.zuyd.nl
account.zuyd.nl
icto.community.zuyd.nl
dataintelligence.zuyd.nl
managementinfo.zuyd.nl
tol.zuyd.nl
regularstudent.zuyd.nl
events-api.zuyd.nl
rbs.services.zuyd.nl
hybrid.zuyd.nl
idservice.zuyd.nl
planon.zuyd.nl
osiris.zuyd.nl
*.test.zuyd.nl
qmp.zuyd.nl
account.zuyd.nl
tol.zuyd.nl
sd.zuyd.nl
community.zuyd.nl
osirisacc-cursusinvoer.test.zuyd.nl
gateway.services.zuyd.nl
vpn.zuyd.nl
cardsonline.zuyd.nl
managementinfo.zuyd.nl
magic.zuyd.nl
exchangestudent.zuyd.nl
acceptatie.zuyd.nl
betalen.zuyd.nl
hybrid.zuyd.nl
direct-access.zuyd.nl
moodle.zuyd.nl
crmzuyd.nl
www.zuyd.nl
desktop.zuyd.nl
print.zuyd.nl
sorry.zuyd.nl
account.zuyd.nl
*.community.zuyd.nl
telefonie.zuyd.nl
covoordummies.zuyd.nl
alumni.zuyd.nl
crmzuyd.nl
exchangestudent.zuyd.nl
desktop.zuyd.nl
redirects.zuyd.nl
centralerepro.zuyd.nl
dynamics.zuyd.nl
vpn.zuyd.nl
desktop.zuyd.nl
vpn.zuyd.nl
rooster.zuyd.nl
exchangestudent.zuyd.nl
webvpn.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
osirissup-basis.test.zuyd.nl
blackboard.zuyd.nl
sts.zuyd.nl
api.zuyd.nl
crmzuyd.nl
cardsonline.zuyd.nl
osirisprj-basis.test.zuyd.nl
help.zuyd.nl
gateway.services.zuyd.nl
sts.zuyd.nl
hotelschool.zuyd.nl
www.zuyd.nl
covoordummies.zuyd.nl
facilitynet.zuyd.nl
netlab.ict.zuyd.nl
*.test.zuyd.nl
covoordummies.zuyd.nl
digitaledidactiek.zuyd.nl
rbs.services.zuyd.nl
facilitynet.zuyd.nl
osiris-basis.zuyd.nl
magic.zuyd.nl
test.crm.server11m.eyehost.eu
rbs.services.zuyd.nl
dataintelligence.zuyd.nl
print.zuyd.nl
crmzuyd.nl
sorry.zuyd.nl
crmzuyd.nl
www.zuyd.nl
crmzuyd.nl
covoordummies.zuyd.nl
covoordummies.zuyd.nl
crmzuyd.nl
crmzuyd.nl
uaportal.hszuyd.nl
garfield.services.zuyd.nl
netdb.services.zuyd.nl
Certificate
The complete raw certificate details for planon.zuyd.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHTDCCBTSgAwIBAgIQcA+lmxhjtpjaADU3Q4qAPDANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMwMTAyMDAwMDAwWhcNMjQwMTAyMjM1 OTU5WjBcMQswCQYDVQQGEwJOTDEQMA4GA1UECBMHTGltYnVyZzEiMCAGA1UEChMZ U3RpY2h0aW5nIFp1eWQgSG9nZXNjaG9vbDEXMBUGA1UEAxMOcGxhbm9uLnp1eWQu bmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdL3kAcMJjWbWuZEcv dD4+Cw/XC2llijLplMs+/q4l/ixe5Jo0Elu3zclkeWG3JR1eORK5S64kzEBZw1/H bGKUbOUWrkjLI0kcDpbumxJJkDuEOrTezmNJytcMe7h4w1cVXNIAA8Gi2NYctyYw QWtzMVlFSJDKXnp7D0DnEEJzP2DWdd13amvO4UhWZGFPLJGzf5+SnrwLIrsuhVxQ HkQcWeB3rbeSG4Blri1GCH9OaU4+M55ICQ76B5r/jUUEsQjzg77ayfQc1y9fEsAg MOPvrilkVqBy0EDBugcvrzPWR3miLABqgW+XiY+zqd2kVTlcD+hDUFxWLVLdbdaV Lky3AgMBAAGjggMgMIIDHDAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6 DDAdBgNVHQ4EFgQUrVR0j1GcCEvgMogEfz/CKJwu8AswDgYDVR0PAQH/BAQDAgWg MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkG A1UdIARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9z ZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6 Ly9HRUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYB BQUHAQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28u Y29tL0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQu b2NzcC5zZWN0aWdvLmNvbTCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYAdv+I Pwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGFcaQi1QAABAMARzBFAiAz lz98qUd4q8pNKQmhlGlnX6RHs73NXRmNbguKtwSunQIhALC11IBg4Ib4UrcKstFd xq7ORBsFNe60UBXBgaLS9Ip+AHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9 MEjX+6sAAAGFcaQi7AAABAMARzBFAiAZ4lhax2/Idxjno1xC/Xqd14jKb+vRRFtg 7mmjnsLp6QIhAPfjnbf0NkP6PRZG9b9gKNsR7g6dNXDiJC3Bv3buvq2wAHUA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGFcaQitgAABAMARjBEAiBm CiS4PaRUf5PyHkvkhYO3NDO9QjOULPSpAQGeDk3ovQIgQPyd06kT8JtO1SZw9DB2 BflSizHmKYawbZ2Mwn5Sg9QwGQYDVR0RBBIwEIIOcGxhbm9uLnp1eWQubmwwDQYJ KoZIhvcNAQEMBQADggIBAJvOF4wFxnKqPSeKKgg1bV71BZfvoXuW1Orvpn/fCw40 oRm9zJLAzxk/CotUS+vOBHlLTBdibAR65385QRTvCEzj0KjFdzq94kavwPjQj+6e XEVxdE1WjkAXydC/wDpZzcLiH0mtjJFMsltGcbcTKBoySXFADtPrlU8ij3mwLM6a Nw6Uc9KPh/hCuIn9rJHbAikPkWmdIjK0BfS4TuqlZYzmXJ8qO91jDIqxz4L3/WcL t2hA1OKidL9PsBYPqnxMHfP9L/zIMqIoNkNGi+JT6pQH3PKI8+aQ6DneuswAQVJv Nvb6u0fAE+/jRq2scMpTX7s1jAap5VmUNF+OA4q9Gj9MM0QMLSQ49+AARrdVDB15 CibUl+cgWggQRSgacffpZpF6zOBvZtPeqxls1mTa4ZuC7xUWz5QOesxWNIxaGXsS hYKZNZ3r85QFeIfYWf42cqsYAq0TG9QMRJ0Jx564y+TfuoLTxcU8dFZIToKNLKW/ DjzL6pTDDqxkSaRXrwuxIzxQxqVSPsnZVE34nh86YrHL5PdW3Z6Yv/kN8ew8PU3c 1EkViCkS4stYeyQPYcLzTz3j1rp7ubmlm6ZnyUIJogwI4PDbATXrmCaqPKVq0UQn 3H5CDiYYrxbhkXscLJtotJkBZm7a23AGb4quWQxu89ctNzlttSp0iAMLJNurXEXp -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S95AHDCY1m1rmRHL3Q+ PgsP1wtpZYoy6ZTLPv6uJf4sXuSaNBJbt83JZHlhtyUdXjkSuUuuJMxAWcNfx2xi lGzlFq5IyyNJHA6W7psSSZA7hDq03s5jScrXDHu4eMNXFVzSAAPBotjWHLcmMEFr czFZRUiQyl56ew9A5xBCcz9g1nXdd2przuFIVmRhTyyRs3+fkp68CyK7LoVcUB5E HFngd623khuAZa4tRgh/TmlOPjOeSAkO+gea/41FBLEI84O+2sn0HNcvXxLAIDDj 764pZFagctBAwboHL68z1kd5oiwAaoFvl4mPs6ndpFU5XA/oQ1BcVi1S3W3WlS5M twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 148954778866286578598414351920823697468 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Limburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Zuyd Hogeschool' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'planon.zuyd.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27922075040099273709814359194851711216805173345130784289496939366897278005007011908005006682131762311662907632855441154620608980958975004649679707408770015883944456725714512022797224861255744390386418222366401692630575072363605053357555965551586047007145009295866863168761261369349112545807840613175503699150353740296776202286185981812918693742692519938628360278908293171171042100138394134239884764902986068845128093390652836294953726141968106220067828526021627134444348290519655358413559978082260556932684049591521947680522734886565923598800158364822636769039214809476440898404044625897794071553878391910461971778743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ad54748f519c084be03288047f3fc2289c2ef00b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planon.zuyd.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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