scriptiebeoordeling-law.universiteitleiden.nl

- Universiteit Leiden -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number c2:07:a8:a5:91:3e:df:ba:32:85:04:ad:9a:4e:31:cb was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit Leiden

Organization: Universiteit Leiden
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): c2:07:a8:a5:91:3e:df:ba:32:85:04:ad:9a:4e:31:cb
Serial Number (int): 257909997822694987818356749873907118539
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 43:82:77:9e:c0:3e:05:a4:bd:ba:f1:b8:88:c1:77:36:82:ac:1d:31
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): ce:22:e6:fa:cf:42:b7:a2:ef:e8:90:c0:86:1e:01:ff:10:7f:81:b2
Fingerprint (sha256): 1b:98:6a:58:26:c4:a2:30:3e:b2:d8:4a:d8:23:1a:6e:7a:ba:d3:4d:3d:36:e5:25:2e:f0:1d:0c:db:6f:9a:a7

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate scriptiebeoordeling-law.universiteitleiden.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scriptiebeoordeling-law.universiteitleiden.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scriptiebeoordeling-law.universiteitleiden.nl

Other certificates including the domain name universiteitleiden.nl

(limited to 100 certificates)
bachelors.universiteitleiden.nl
scharrelaar-p1.leidenuniv.nl
springoffer.universiteitleiden.nl
weblectures-a.leidenuniv.nl
phdcareerplatform.universiteitleiden.nl
mentornetwerk.universiteitleiden.nl
form.services.universiteitleiden.nl
mentornetwerk.universiteitleiden.nl
studiegids-p.leidenuniv.nl
ooievaar.web.leidenuniv.nl
scharrelaar-p3.leidenuniv.nl
helpdesk.universiteitleiden.nl
depthoffield.universiteitleiden.nl
aqa.universiteitleiden.nl
acquisitions.library.universiteitleiden.nl
cms-a.universiteitleiden.nl
planon-a.universiteitleiden.nl
web.universiteitleiden.nl
grasparkiet.leidenuniv.nl
aqa.universiteitleiden.nl
trail.universiteitleiden.nl
cms.universiteitleiden.nl
depthoffield.universiteitleiden.nl
www.universiteitleiden.nl
masters.universiteitleiden.nl
sapbo-acc.universiteitleiden.nl
planon-t.universiteitleiden.nl
ooievaar.web.leidenuniv.nl
ask-a-librarian.universiteitleiden.nl
scharrelaar-p3.leidenuniv.nl
presto-a.universiteitleiden.nl
grasparkiet.leidenuniv.nl
webpresentations-a.universiteitleiden.nl
mentornetwerk.universiteitleiden.nl
mfa.services.universiteitleiden.nl
mysites.universiteitleiden.nl
bachelors.universiteitleiden.nl
tornado-p-https.web.leidenuniv.nl
mfa-a.services.universiteitleiden.nl
www.jotform3.leidenuniv.nl
finder.library.universiteitleiden.nl
scriptiebeoordeling-law.universiteitleiden.nl
planon.universiteitleiden.nl
redirectservice.universiteitleiden.nl
wiki.cfer.universiteitleiden.nl
tornado-p-https.web.leidenuniv.nl
tornado-p-https.web.leidenuniv.nl
wbs.universiteitleiden.nl
tdm.universiteitleiden.nl
video.universiteitleiden.nl
planon.universiteitleiden.nl
aqa.universiteitleiden.nl
lu-card-activeren-a.universiteitleiden.nl
studiegids.universiteitleiden.nl
tornado-p-https.web.leidenuniv.nl
video.universiteitleiden.nl
helpdesk-o.universiteitleiden.nl
mentornetwerk.universiteitleiden.nl
phdcareerplatform.universiteitleiden.nl
planon-a.universiteitleiden.nl
lenteactie.universiteitleiden.nl
aqa.universiteitleiden.nl
acquisitions.library.universiteitleiden.nl
aqa.universiteitleiden.nl
benb.universiteitleiden.nl
aqa.universiteitleiden.nl
aqa.universiteitleiden.nl
topaza-t.leidenuniv.nl
www-r.universiteitleiden.nl
omeroweb.services.universiteitleiden.nl
kokmeeuw.leidenuniv.nl
aqa.universiteitleiden.nl
indonesie.universiteitleiden.nl
gitlab.services.universiteitleiden.nl
scharrelaar-p3.leidenuniv.nl
studyspots.universiteitleiden.nl
mfa-a.services.universiteitleiden.nl
phdcareerplatform.universiteitleiden.nl
grasparkiet.leidenuniv.nl
rooster.universiteitleiden.nl
tornado-p-https.web.leidenuniv.nl
jatos.services.universiteitleiden.nl
webpresentations.universiteitleiden.nl
bookandbyte.universiteitleiden.nl
hop-qa.leidenuniv.nl
brightspacesupport.universiteitleiden.nl
sshgw01.alice.universiteitleiden.nl
numerusfixus.universiteitleiden.nl
weblectures.leidenuniv.nl
aqa.universiteitleiden.nl
account-a.services.universiteitleiden.nl
p-issc-009996.infra.leidenuniv.nl
jatos-t.services.universiteitleiden.nl
finder.library.universiteitleiden.nl
aqa.universiteitleiden.nl
lithium.liacs.nl
scharrelaar-p1.leidenuniv.nl
depthoffield.universiteitleiden.nl
indonesie.universiteitleiden.nl
aqa.universiteitleiden.nl

Certificate

The complete raw certificate details for scriptiebeoordeling-law.universiteitleiden.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIjDCCBnSgAwIBAgIRAMIHqKWRPt+6MoUErZpOMcswDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDQwNDAwMDAwMFoXDTI0MDQwMzIz
NTk1OVowejELMAkGA1UEBhMCTkwxFTATBgNVBAgTDFp1aWQtSG9sbGFuZDEcMBoG
A1UEChMTVW5pdmVyc2l0ZWl0IExlaWRlbjE2MDQGA1UEAxMtc2NyaXB0aWViZW9v
cmRlbGluZy1sYXcudW5pdmVyc2l0ZWl0bGVpZGVuLm5sMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA52rQ2tJrcHBnQRf1nvNY6qEUpkQHM/hat8zIG5yV
8/u8U87RLKVZP0S075yDqLhXxRpq8F0W96dIfXxez245qgmQP3IqSaM6CNUy8Y85
N/aP1uU6H7mJQah9wM9KocVIwLWzKj932Ux5LKafQ4iD2ytxI3hbOrBbIFicFtlv
hfDStl4clpUZeUpgeYuXb1Ucm3pu+le1pBs5IWogsvMeMrBO2pMTZYz1OdsPGYZk
gtKCMY+v7fdlRTB65kfHa/RwTaiLvP8b8Lnzd3Ge4Hcjgk5HuIGiTVWMljCjj3EN
6CtUYWy+wNEOXSmPU7cyf0EmZN1r6YFbiCce8UYwM4RQ6eLGmeO0bAeYwtNLKsPD
oUXjwBU9D/5o7yQSQWgivt4j/DmjFgqNJR+AKa75nPhw7DPEaDir6120eHvD9ZrK
FvBaFdiIdPwbjdzU+dUyfGVyGVwGZh4cCxDldEpBhc6h3P6K7R8FgjMUyp1yxKgJ
WuslFdk4gpEwgO6bmlFVp9llVwr5K55n3ycJrc4L3DF+Cl/EvXGCZFUcgVPnDM0T
7GV1bitWBsDyNqy+RARhMg02goPdAgyLPn3enfkQrrdDnWuwOKXcvTyygeKxw6t7
cscvWFs7px47iDbpIoJ1PuhkdM6k7fl6ewp6EcQ7HOeaEIJgVw0srys41t9zEZXe
3xkCAwEAAaOCA0EwggM9MB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoM
MB0GA1UdDgQWBBRDgneewD4FpL268biIwXc2gqwdMTAOBgNVHQ8BAf8EBAMCBaAw
DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYD
VR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3Nl
Y3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDov
L0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEF
BQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5j
b20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5v
Y3NwLnNlY3RpZ28uY29tMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwB2/4g/
Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYdNHugrAAAEAwBIMEYCIQDG
1Ui70oXPxTbdK2wEXa3AtR2FY7IfSgP24Q8ljAkMLwIhAPdfrdRbP57tIq7tta2L
CBugHPvRPNcbjZ0ks18q6A8BAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9
MEjX+6sAAAGHTR7ojgAABAMARjBEAiBp3tsJZOAgqKyqrX0FhqDLnRvSbi4BIvDX
bC/XnIRAygIgLJ3pgkkDObJlv9QzKjMBziHv/J6Yx7WVqsdeeNRjJAsAdwDuzdBk
1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYdNHuhWAAAEAwBIMEYCIQCJ
h6RpUHzSIZscMHA42/rVKnB8kZw+o+P+cWvCigrGOwIhAOMg0l3VJvO/XvhWNxt0
PkhEmcTjS6fhDa7ZpWZlbqlyMDgGA1UdEQQxMC+CLXNjcmlwdGllYmVvb3JkZWxp
bmctbGF3LnVuaXZlcnNpdGVpdGxlaWRlbi5ubDANBgkqhkiG9w0BAQwFAAOCAgEA
bjnNGsgl4N1kFhXMleHp8TBNP6owR+00WSYyoI8acYA3HY1+Qx1vuhS2GaeTJeyS
8Ut2xnsKxZ3cvQIlu6O40sOUbqgCQ8dLQamMc3BgzmBoc83aJwoV0fjsKLU+xkky
tav8fn4mfzxz0RDl9qVghoERra6YD37lCNO3JsDplBf+KVwE+MNABtB3P0ROOUYK
OkRpYseQSCBTfql9DQgpyzIJgyrpDGHM8ywFfFsxJMiY3Rfpx7/lWkZkqDl2p7KF
fsZae2kvRW4WcSpHW7+m5G7f057CwElbffaqBvD/gSaIPjkmsUA0q6aT56RAvKW3
B+KLeVQSYZx9qHGfElohK6pSRaDSdpbQ4zVn/XeDMc6JlU97duNr9wWYX9xffAzW
kkC8An8egQR8i3Y6q++fDuR9Y3aeMGMgJP6mPWTaxDccJEG9xBO/YuxI3XS6HN+8
LuElp7j+kkKpsE+L3MMNHXtSc67E81PaPwLLg2kAFD2uBASPyfBDV94FG4oyb4v3
Y96UEkX8CoL9HdG1OyMyMLAI9D8JcZ4AZHon0g7bmYshfBwWaT3MMSQRAdzhaz6b
aK7Z7kUe2Nv///RTStdjvmISEybhaX0UkUG5zDG28eSi9Ss07kwnNLsD7Z5TxKub
QfqMkinwzG7QDsdmTeoum19Ygsoo7Eo6SVmOwhBuZIA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 257909997822694987818356749873907118539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scriptiebeoordeling-law.universiteitleiden.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 944100008633647859751017195782699124815823308114006151957096052858546693672092348744304218310864702873357235207985632210558026225645213492604218224929473375252354773774475955402366170778906822866103961282519829415458301256955065547225942414224244803394822453229728551374789039976512294070544265643761034523836094916980053524536719688181079728830171834887792869697874284584671636493647282052752731384734929408464212692039938211374187957393717322448871282218029958462829599826995814497976676229299689444334410508656127064267400283756971235734487942813823443354977100560642099101053803574484454963192656456875940354584388974554293040514938248890273730338855331977666181167169707597106665956070429268866791933130156534199891081050537790007254057616814994620018771045846270317138927764340387017718145757145611254284501413857586446887368960409514853999111944566419798814307539704754026796559483868175126374169371440699178185484149375351023508221205828786574909787448517651982812087166912611156095077143267688062003436912317349729537786654149569643960763792709052984902770632768449510313767488276143026941817068726519679956657749065401072717294625302704760055141817424775234235955866059494543411189686315253258750189092445861864445365378841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4382779ec03e05a4bdbaf1b888c1773682ac1d31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001874d1ee82b0000040300483046022100c6d548bbd285cfc536dd2b6c045dadc0b51d8563b21f4a03f6e10f258c090c2f022100f75fadd45b3f9eed22aeedb5ad8b081ba01cfbd13cd71b8d9d24b35f2ae80f01007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001874d1ee88e0000040300463044022069dedb0964e020a8acaaad7d0586a0cb9d1bd26e2e0122f0d76c2fd79c8440ca02202c9de982490339b265bfd4332a3301ce21effc9e98c7b595aac75e78d463240b007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001874d1ee85600000403004830460221008987a469507cd2219b1c307038dbfad52a707c919c3ea3e3fe716bc28a0ac63b022100e320d25dd526f3bf5ef856371b743e484499c4e34ba7e10daed9a566656ea972
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptiebeoordeling-law.universiteitleiden.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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