sd.zuyd.nl
- Stichting Zuyd Hogeschool -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number a5:de:23:ad:fa:e1:dd:70:af:09:24:fd:9d:92:83:96 was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Stichting Zuyd Hogeschool
Organization:
Stichting Zuyd Hogeschool
State / Province:
Limburg
Country: NL
Country: NL
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): a5:de:23:ad:fa:e1:dd:70:af:09:24:fd:9d:92:83:96Serial Number (int): 220476032875558400025247439063925031830
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: a0:7c:1f:c2:0d:52:51:7c:d2:73:e8:7e:27:02:20:72:b6:c6:38:87
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 03:0f:0e:a4:9f:56:27:26:e6:42:26:0b:37:c9:ec:04:6b:09:a6:5b
Fingerprint (sha256): 13:61:60:f6:58:1d:31:af:d4:a3:ec:22:97:08:c0:45:bc:20:b1:25:72:c1:d2:23:0c:cb:c2:2e:b5:b9:f8:29
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate sd.zuyd.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sd.zuyd.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sd.zuyd.nl
Other certificates including the domain name zuyd.nl
(limited to 100 certificates)
desktop.zuyd.nl
print.zuyd.nl
gitlab.services.zuyd.nl
vpn.zuyd.nl
moodle.zuyd.nl
guest-networkaccess.zuyd.nl
osiris-basis.zuyd.nl
osirisdocent.zuyd.nl
account.zuyd.nl
icto.community.zuyd.nl
dataintelligence.zuyd.nl
managementinfo.zuyd.nl
tol.zuyd.nl
regularstudent.zuyd.nl
events-api.zuyd.nl
rbs.services.zuyd.nl
hybrid.zuyd.nl
idservice.zuyd.nl
planon.zuyd.nl
osiris.zuyd.nl
*.test.zuyd.nl
qmp.zuyd.nl
account.zuyd.nl
tol.zuyd.nl
sd.zuyd.nl
community.zuyd.nl
osirisacc-cursusinvoer.test.zuyd.nl
gateway.services.zuyd.nl
vpn.zuyd.nl
cardsonline.zuyd.nl
managementinfo.zuyd.nl
magic.zuyd.nl
exchangestudent.zuyd.nl
acceptatie.zuyd.nl
betalen.zuyd.nl
hybrid.zuyd.nl
direct-access.zuyd.nl
moodle.zuyd.nl
crmzuyd.nl
www.zuyd.nl
desktop.zuyd.nl
print.zuyd.nl
sorry.zuyd.nl
account.zuyd.nl
*.community.zuyd.nl
telefonie.zuyd.nl
covoordummies.zuyd.nl
alumni.zuyd.nl
crmzuyd.nl
exchangestudent.zuyd.nl
desktop.zuyd.nl
redirects.zuyd.nl
centralerepro.zuyd.nl
dynamics.zuyd.nl
vpn.zuyd.nl
desktop.zuyd.nl
vpn.zuyd.nl
rooster.zuyd.nl
exchangestudent.zuyd.nl
webvpn.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
osirissup-basis.test.zuyd.nl
blackboard.zuyd.nl
sts.zuyd.nl
api.zuyd.nl
crmzuyd.nl
cardsonline.zuyd.nl
osirisprj-basis.test.zuyd.nl
help.zuyd.nl
gateway.services.zuyd.nl
sts.zuyd.nl
hotelschool.zuyd.nl
www.zuyd.nl
covoordummies.zuyd.nl
facilitynet.zuyd.nl
netlab.ict.zuyd.nl
*.test.zuyd.nl
covoordummies.zuyd.nl
digitaledidactiek.zuyd.nl
rbs.services.zuyd.nl
facilitynet.zuyd.nl
osiris-basis.zuyd.nl
magic.zuyd.nl
test.crm.server11m.eyehost.eu
rbs.services.zuyd.nl
dataintelligence.zuyd.nl
print.zuyd.nl
crmzuyd.nl
sorry.zuyd.nl
crmzuyd.nl
www.zuyd.nl
crmzuyd.nl
covoordummies.zuyd.nl
covoordummies.zuyd.nl
crmzuyd.nl
crmzuyd.nl
uaportal.hszuyd.nl
garfield.services.zuyd.nl
netdb.services.zuyd.nl
print.zuyd.nl
gitlab.services.zuyd.nl
vpn.zuyd.nl
moodle.zuyd.nl
guest-networkaccess.zuyd.nl
osiris-basis.zuyd.nl
osirisdocent.zuyd.nl
account.zuyd.nl
icto.community.zuyd.nl
dataintelligence.zuyd.nl
managementinfo.zuyd.nl
tol.zuyd.nl
regularstudent.zuyd.nl
events-api.zuyd.nl
rbs.services.zuyd.nl
hybrid.zuyd.nl
idservice.zuyd.nl
planon.zuyd.nl
osiris.zuyd.nl
*.test.zuyd.nl
qmp.zuyd.nl
account.zuyd.nl
tol.zuyd.nl
sd.zuyd.nl
community.zuyd.nl
osirisacc-cursusinvoer.test.zuyd.nl
gateway.services.zuyd.nl
vpn.zuyd.nl
cardsonline.zuyd.nl
managementinfo.zuyd.nl
magic.zuyd.nl
exchangestudent.zuyd.nl
acceptatie.zuyd.nl
betalen.zuyd.nl
hybrid.zuyd.nl
direct-access.zuyd.nl
moodle.zuyd.nl
crmzuyd.nl
www.zuyd.nl
desktop.zuyd.nl
print.zuyd.nl
sorry.zuyd.nl
account.zuyd.nl
*.community.zuyd.nl
telefonie.zuyd.nl
covoordummies.zuyd.nl
alumni.zuyd.nl
crmzuyd.nl
exchangestudent.zuyd.nl
desktop.zuyd.nl
redirects.zuyd.nl
centralerepro.zuyd.nl
dynamics.zuyd.nl
vpn.zuyd.nl
desktop.zuyd.nl
vpn.zuyd.nl
rooster.zuyd.nl
exchangestudent.zuyd.nl
webvpn.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
osirissup-basis.test.zuyd.nl
blackboard.zuyd.nl
sts.zuyd.nl
api.zuyd.nl
crmzuyd.nl
cardsonline.zuyd.nl
osirisprj-basis.test.zuyd.nl
help.zuyd.nl
gateway.services.zuyd.nl
sts.zuyd.nl
hotelschool.zuyd.nl
www.zuyd.nl
covoordummies.zuyd.nl
facilitynet.zuyd.nl
netlab.ict.zuyd.nl
*.test.zuyd.nl
covoordummies.zuyd.nl
digitaledidactiek.zuyd.nl
rbs.services.zuyd.nl
facilitynet.zuyd.nl
osiris-basis.zuyd.nl
magic.zuyd.nl
test.crm.server11m.eyehost.eu
rbs.services.zuyd.nl
dataintelligence.zuyd.nl
print.zuyd.nl
crmzuyd.nl
sorry.zuyd.nl
crmzuyd.nl
www.zuyd.nl
crmzuyd.nl
covoordummies.zuyd.nl
covoordummies.zuyd.nl
crmzuyd.nl
crmzuyd.nl
uaportal.hszuyd.nl
garfield.services.zuyd.nl
netdb.services.zuyd.nl
Certificate
The complete raw certificate details for sd.zuyd.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHRjCCBS6gAwIBAgIRAKXeI6364d1wrwkk/Z2Sg5YwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDEwMjAwMDAwMFoXDTI0MDEwMjIz NTk1OVowWDELMAkGA1UEBhMCTkwxEDAOBgNVBAgTB0xpbWJ1cmcxIjAgBgNVBAoT GVN0aWNodGluZyBadXlkIEhvZ2VzY2hvb2wxEzARBgNVBAMTCnNkLnp1eWQubmww ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLzDJyMDz2UcC1aL9kPym ZNaiKDa3uIkDEGncJhdldDKdRTzkUhe+z4gppz931s7qWC1VO9uXC+bYVlXqYizM RqAIQCq6nSi7+pb7q+EdYqJLfuauVGbIuT/O9J9+MxaWzGtVtoq2Eq/LZlq3zKUe KPjYKZjfa7imdKBzF1g7z2fOrRqZPcLKjiq/2oCNC9iTNmFEvVr5oXt7MrExqn8U D9xcepAhKdYRNdJUnQb4Rc6aPNWR8rhEVjtHZIkh0KYZHs2sz8qQ7LF7H3drhkZL L/c2HtRG5DOFLO07GwNm2JLYIw1VC7tlsu30xxJIOfpkb1h8RW6xCWjWXxulcWsB AgMBAAGjggMdMIIDGTAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAd BgNVHQ4EFgQUoHwfwg1SUXzSc+h+JwIgcrbGOIcwDgYDVR0PAQH/BAQDAgWgMAwG A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1Ud IARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0 aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9H RUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUH AQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29t L0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2Nz cC5zZWN0aWdvLmNvbTCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYAdv+IPwq2 +5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGFcaMyoQAABAMARzBFAiBlvT7d pi0qq4UhwGJKlGp9CXgJrRF9Y2YmWJO5mfSuqAIhAMdoVKEF8I77slU8hshCmeoW 0DjoSoC2SfOe6UCfSAeWAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX +6sAAAGFcaMyZgAABAMARzBFAiEA1l7QqYl/uAKnkhi1gzCPiVaGxDczeeZU7CT1 3Ehcdb4CIEGZ+bG2id+SI5cRlZWOG3ZwpElXfENEMADSw5Fh/F3sAHYA7s3QZNXb Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGFcaMyOwAABAMARzBFAiEA48fK C+gCxGNClYVId1BuXto1Hc+ugUbdujM2SeCLQmACIC+g8Gwk99Jc9cxIaQ8SRzS4 9eHDN9mU2u7Mup/L+X3DMBUGA1UdEQQOMAyCCnNkLnp1eWQubmwwDQYJKoZIhvcN AQEMBQADggIBAB+DC4HHLEwo1ZJ+gRguHccyKhkiBivIkftkiiiV31P10C8lCqyx xWasaJbIxyr6Am3KBIGJHI1Puw7hizAv1lAjL0n36cn408dA9DGXemCimHnw0WzC /zHa965GVHT7p0DZwy7OCxFc634Ev2LAVOalSg73/hXMk0jatF4U2wLLgh7LRXvT SJXmh32GAPjiVC+YMfDyvEVXPaQ5/nCE6UInC9yW26xpIlGP3KxVv4CqXHIEyR2+ 1IHBuBLshbsZeci33PXMBIas93E/AnWDm67u8LPgVVC0J5R2bNhoAeGmbCW5cWbl KSUxcPbfmLbHO8abe0zwWkT+6yACWDHqub0JBiXi+x51w6h0h5NqQpF7G0zhPicv hfPICNht2U2sA9rTnlbGskd5lBYTpUkZ3L6IiBGy7XbFznoLoqsHauaQzWeOcF6T sjCbTP4pkYutXynzacfHpdBThJdMH9cobCOGXT/jnLlWIU5gISl4XvX+t/7venP7 RP9+OHYrZVTPbuhBkVQza/ihznHISQix0BroYs39edWoa8rmju3WpxdL0Ar4fYDn DlMXSag85Efx8bldhXRvvPpixKCWydIVZZkC0WtKVYSAI96Fhi227V/9acW8rGMA SLltUjpOT+gHfHnL25g677vFcRfHpe/xn0Z5gkWy/6q9kYflFQICmXKg -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS8wycjA89lHAtWi/ZD8 pmTWoig2t7iJAxBp3CYXZXQynUU85FIXvs+IKac/d9bO6lgtVTvblwvm2FZV6mIs zEagCEAqup0ou/qW+6vhHWKiS37mrlRmyLk/zvSffjMWlsxrVbaKthKvy2Zat8yl Hij42CmY32u4pnSgcxdYO89nzq0amT3Cyo4qv9qAjQvYkzZhRL1a+aF7ezKxMap/ FA/cXHqQISnWETXSVJ0G+EXOmjzVkfK4RFY7R2SJIdCmGR7NrM/KkOyxex93a4ZG Sy/3Nh7URuQzhSztOxsDZtiS2CMNVQu7ZbLt9McSSDn6ZG9YfEVusQlo1l8bpXFr AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 220476032875558400025247439063925031830 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Limburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Zuyd Hogeschool' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sd.zuyd.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21862497300929360907027914565518193264113701540757885669342944604786823745298379194667464884051158312362634437814471732739412062096852931396321478010989273794019264483722310587278028530893685601297587265304158995839896161814784269737521175655774379737504524611255101828681453012571618770969394245661444054350709533583410919759522038584358391944158703946814084352113827812355437777997768883698136141255090993866619602987967443200141752846599480187934423199563439025791074122226881797849004971630244071522762743462998256581055952064289591244676035501734678496959355976046001830837254323293326870725559650463622139833089 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a07c1fc20d52517cd273e87e27022072b6c63887 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd.zuyd.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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