www.jotform3.leidenuniv.nl

- Leiden University -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 04:f2:e6:6b:92:2e:a3:74:82:6f:da:40:f3:ed:73:92 was issued on by TERENA.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Leiden University

Organization: Leiden University
Organization unit: ISSC
Locality: Leiden
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f2:e6:6b:92:2e:a3:74:82:6f:da:40:f3:ed:73:92
Serial Number (int): 6578121299768514604777882927974151058
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 00:1d:05:e6:84:88:66:e2:8a:4c:b7:91:28:a9:6b:e0:8c:ff:3d:0e
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): ed:df:d1:9f:21:fb:ef:eb:84:19:23:07:9d:b4:45:45:e9:df:c2:a2
Fingerprint (sha256): 1a:af:aa:95:ec:97:69:50:3c:5f:4f:be:f3:04:5e:db:72:8b:78:7a:4f:21:23:13:6a:d5:64:3f:be:a0:c8:2d

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate www.jotform3.leidenuniv.nl

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jotform3.leidenuniv.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vippleiden.com
studereninleiden.nl
leidensafetyandsecurityblog.nl
leiden-islamblog.nl
vippleiden.nl
www.leidensafetyandsecurityblog.nl
www.leiden-islamblog.nl
usistraining.leidenuniv.nl
tijdelijk.leidenuniv.nl
www.libcblog.nl
sfx.leidenuniv.nl
jotform3.leidenuniv.nl
scharrelaar-p4-solr-proxy.leidenuniv.nl
scharrelaar-p2-solr-proxy.leidenuniv.nl
sbb.leidenuniv.nl
opendagen.studereninleiden.nl
opendagen.leidenuniv.nl
studenthousing.leidenuniv.nl
science.leidenuniv.nl
lacdrvirtuallab.leidenuniv.nl
delilah.universiteitleiden.nl
cil.universiteitleiden.nl
blogtheology.leidenuniv.nl
ctc.leidenuniv.nl
blogtheologie.leidenuniv.nl
herziedegrondwet.leidenuniv.nl
apply.leiden.edu
ibl.leidenuniv.nl
oral-history-archive-kitlv.library.leiden.edu
www.sbb.leidenuniv.nl
www.opendagen.studereninleiden.nl
www.opendagen.leidenuniv.nl
www.oiem.leidenuniv.nl
www.nieuwsbrief.leidenuniv.nl
archive-kitlv.library.leiden.edu
www.science.leidenuniv.nl
www.en.mastersinleiden.nl
www.lacdrvirtuallab.leidenuniv.nl
www.ibl.leidenuniv.nl
koloniaal.library.leiden.edu
www.ctc.leidenuniv.nl
www.blogtheology.leidenuniv.nl
www.blogtheologie.leidenuniv.nl
www.apply.leiden.edu
colonial.library.leiden.edu
courses.library.leiden.edu
digitalcollections.library.leiden.edu
hy.library.leiden.edu
www.jotform3.leidenuniv.nl

Other certificates including the domain name leidenuniv.nl

(limited to 100 certificates)
web2print.leidenuniv.nl
nmr.leidenuniv.nl
marishead.lorentz.leidenuniv.nl
leidenlawblog.nl
scharrelaar-p1.leidenuniv.nl
cas.physics.leidenuniv.nl
ppsn2020.liacs.leidenuniv.nl
datamining.liacs.leidenuniv.nl
issc.leidenuniv.nl
tornado-p-https.web.leidenuniv.nl
lucris.leidenuniv.nl
celspin-p.issc.leidenuniv.nl
foreman-develop.infra.leidenuniv.nl
leidenuniv.nl
SALMS01.leidenuniv.nl
director1-dev.srvtest.leidenuniv.nl
icga.leidenuniv.nl
uaccess.leidenuniv.nl
jira.issc.leidenuniv.nl
prosobab.leidenuniv.nl
scriptiebeoordeling-hum.leidenuniv.nl
www.math.leidenuniv.nl
Planon-BenO-t.leidenuniv.nl
login.uaccess.leidenuniv.nl
vrops-cluster.luci.leidenuniv.nl
issc.leidenuniv.nl
noah.backup.leidenuniv.nl
u-ldap-dev.srvtest.leidenuniv.nl
p-luci-001131.infra.leidenuniv.nl
zweepspin-p.issc.leidenuniv.nl
socrates.leidenuniv.nl
uaccess.leidenuniv.nl
tornado-a-https.web.leidenuniv.nl
leidenuniv.nl
lacdrvirtuallab-qa.leidenuniv.nl
sapgax.issc.leidenuniv.nl
vg5.strw.leidenuniv.nl
marishead.lorentz.leidenuniv.nl
avior.math.leidenuniv.nl
blackboardstaging.leidenuniv.nl
weblectures-a.leidenuniv.nl
usis.leidenuniv.nl
strwmail.strw.leidenuniv.nl
sapeca.leidenuniv.nl
phdcareerplatform.universiteitleiden.nl
u-tools.srvtest.leidenuniv.nl
aristotle.leidenuniv.nl
sapsra.leidenuniv.nl
www.strw.leidenuniv.nl
jss.leidenuniv.nl
mail.physics.leidenuniv.nl
mysite.leidenuniv.nl
kwartel-a.leidenuniv.nl
p-issc-007122.vuw.leidenuniv.nl
splbs02.vuw.leidenuniv.nl
huisstijl.leidenuniv.nl
form.services.universiteitleiden.nl
wagner-p.leidenuniv.nl
pontus.lorentz.leidenuniv.nl
leidenarthistoryblog.nl
smtp.leidenuniv.nl
studiegids-p.leidenuniv.nl
ooievaar.web.leidenuniv.nl
spapp30.vuw.leidenuniv.nl
saufb01.vuw.leidenuniv.nl
schildspin-dev.issc.leidenuniv.nl
lms-wyn-disp03.issc.leidenuniv.nl
raf-qa.law.leidenuniv.nl
lists.leidenuniv.nl
zweepspin-p.issc.leidenuniv.nl
webdav.leidenuniv.nl
scharrelaar-p3.leidenuniv.nl
helpdesk.universiteitleiden.nl
libcblog.nl
phdtrack-a.leidenuniv.nl
teams.leidenuniv.nl
evasys.leidenuniv.nl
x-ldap.leidenuniv.nl
cups.issc.leidenuniv.nl
uaccess.leidenuniv.nl
europeanbordercommunities.eu
science.leidenuniv.nl
vg5.strw.leidenuniv.nl
*.weblog.leidenuniv.nl
strwmgmt.strw.leidenuniv.nl
cms-a.universiteitleiden.nl
splic09.ilo.leidenuniv.nl
*.weblog.leidenuniv.nl
pinkashaw-o4.iam-ota.leidenuniv.nl
bankiva.leidenuniv.nl
rds-a.campus.leidenuniv.nl
phdtrack.leidenuniv.nl
planon-a.universiteitleiden.nl
jack-qa.web.leidenuniv.nl
web2print-t.leidenuniv.nl
grasparkiet.leidenuniv.nl
filosofie.leidenuniv.nl
jenkins.issc.leidenuniv.nl
www.readeronline.leidenuniv.nl
illinois.meta.leidenuniv.nl

Certificate

The complete raw certificate details for www.jotform3.leidenuniv.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6578121299768514604777882927974151058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ISSC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jotform3.leidenuniv.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725760877753634067811106092082346837782783468441282606342226301783499059270121291537231812294379440269515587351749718122557874650571892524027029142944386477604907532715721595952395064279940701057759892372353786041980958683019089438047623230184168330389650715441000815183110218676141181771092476538817638032584394369092534614244383920072812462504859737180990721875557197777595305488818851953030291244750621816527914640825355135446883189457286612752437680408326980190444618318512526047518121342022482132245641065376989203764160306326498328412704642807513299112909454187549942143646467731680917686913204636523803344381810191363646245213143612943874730222686947781946784056563527365610807915888102405240085688958809805095283273590001368213601685939473584922840201935636032003581196402409613386540331159646488332329876895429475982169927579609884465227023336955554018879675101324851132040750148002450680860996708921672494349772516591614408495007453521670870090443334613635388116901635679258480101348565977337509001889193294141403050327097458434838986678515964638287650665165262516919964302887442879577363889521163749967718812814516762245620247736075975430550569775434339853155010388586537081555187932957124829673284171570276208234078039593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							001d05e6848866e28a4cb79128a96be08cff3d0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1349 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vippleiden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studereninleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leidensafetyandsecurityblog.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leiden-islamblog.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vippleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leidensafetyandsecurityblog.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leiden-islamblog.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usistraining.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tijdelijk.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libcblog.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfx.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jotform3.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scharrelaar-p4-solr-proxy.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scharrelaar-p2-solr-proxy.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbb.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendagen.studereninleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendagen.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studenthousing.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacdrvirtuallab.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delilah.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cil.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogtheology.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogtheologie.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herziedegrondwet.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibl.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oral-history-archive-kitlv.library.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbb.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendagen.studereninleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendagen.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oiem.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nieuwsbrief.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive-kitlv.library.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.science.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.mastersinleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacdrvirtuallab.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibl.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koloniaal.library.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctc.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogtheology.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogtheologie.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apply.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonial.library.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.library.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcollections.library.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hy.library.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jotform3.leidenuniv.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001702fa8bae40000040300473045022065887e22ebd315a1cf0794f5c381a893079764faab53f3969d21027399d3c04c022100c2f0755799208e3ccc74a8ec33ee3fb77857143f4e4867f4aa32db792673f6900077002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001702fa8bb530000040300483046022100af21570aa45a23a3a9b6ac1189072a58df50eed91be551c0e8f1bbd1b8e8dd0a022100a57fb2821c0d36f62af08b6a56dbe92ecc0c00eef1026e431dcfc9cd2f61893c00760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e5000001702fa8bb5a00000403004730450221008f21d71eff245a51d5df5628993f56fc408ea75df63eadd4522cba2e6ccb2ee702200e67b084e0039c85c95b9edd7619d2eff5bc7227afd477a59cf55805490588ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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