*.lib.unibocconi.it

- Università Commerciale Luigi Bocconi -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 91:ab:16:6f:7e:3d:72:67:2f:e8:b7:f0:3a:06:d2:1a was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Università Commerciale Luigi Bocconi

Organization: Università Commerciale Luigi Bocconi
State / Province: Lombardia
Country: IT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 91:ab:16:6f:7e:3d:72:67:2f:e8:b7:f0:3a:06:d2:1a
Serial Number (int): 193626397198028972481353407463244091930
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 90:55:0c:d8:d4:d3:1e:9d:2a:db:a1:b7:6d:98:7a:37:74:74:01:b9
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): f0:63:fe:30:0e:43:25:b0:8a:d0:82:5a:7f:ba:b8:3d:84:6f:27:78
Fingerprint (sha256): 25:d2:a1:50:81:d0:d9:89:7d:fb:70:4e:93:5e:17:99:35:9c:a7:bb:32:e8:7f:28:8a:54:42:40:75:91:ad:37

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.lib.unibocconi.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lib.unibocconi.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lib.unibocconi.it
lib.unibocconi.it

Other certificates including the domain name unibocconi.it

(limited to 100 certificates)
liferay-test.unibocconi.it
app-public.unibocconi.it
mdm.unibocconi.it
www.unibocconi.it
eventi.unibocconi.it
zimbra.unibocconi.it
donaora.unibocconi.it
proc231.unibocconi.it
idgov-dev.unibocconi.it
www.mindlike.de
forms.unibocconi.it
zcm02-srvr.sm.unibocconi.it
paytool.unibocconi.it
virtualoffice.unibocconi.it
val.unibocconi.it
moodle.unibocconi.it
*.unibocconi.it
gradsurvey.unibocconi.it
exrec.unibocconi.it
kaltura.unibocconi.it
ciscovcs-e02.unibocconi.it
bocconigallery.unibocconi.it
mdm01.sm.unibocconi.it
ks3-admiss-test.sm.unibocconi.it
login.unibocconi.it
idp.unibocconi.it
webmail.phd.unibocconi.it
zcm01-srvr.sm.unibocconi.it
paytool.unibocconi.it
mdm01.sm.unibocconi.it
elearning.unibocconi.it
imaps.unibocconi.it
app.unibocconi.it
bsp2030.unibocconi.it
webmail.master.unibocconi.it
zcm01-srvr.sm.unibocconi.it
*.unibocconi.it
imaps.phd.unibocconi.it
val.unibocconi.it
hosting.bluera.com
ciscovcs-e01.unibocconi.it
sspr.unibocconi.it
asso.unibocconi.it
employers-test.unibocconi.it
vpn.unibocconi.it
esse3pa.unibocconi.it
libbook.unibocconi.it
michaelmoyles.ie
www.pb.unibocconi.it
elearning.unibocconi.it
webmail.unibocconi.it
vd.unibocconi.it
donaora.unibocconi.it
mykoriak.com
portalehr-ext.unibocconi.it
badge.unibocconi.it
webmail.master.unibocconi.it
sas.unibocconi.it
cloud.unibocconi.it
apps-srvr.unibocconi.it
*.unibocconi.it
ks3-mobile.unibocconi.it
hr-onlinechallenge.unibocconi.it
bit.unibocconi.it
esse3pa.unibocconi.it
poll.unibocconi.it
www.pb.unibocconi.it
sts.unibocconi.it
www.rassegnastampa.unibocconi.it
ctxweb.unibocconi.it
hosting.bluera.com
www.knowledge.unibocconi.it
www.unibocconi.it
dondena.unibocconi.eu
concepteventtest.unibocconi.it
w20.unibocconi.it
donaora.unibocconi.it
sspr.unibocconi.it
donaora.unibocconi.it
admissions.unibocconi.it
aziende.unibocconi.it
sas.unibocconi.it
admin-blackboard.unibocconi.it
regimefiscale.unibocconi.it
*.unibocconi.it
*.lib.unibocconi.it
employers.unibocconi.it
owa.unibocconi.it
hosting.bluera.com
lib.unibocconi.it
lib.unibocconi.it
giving.unibocconi.it
info.unibocconi.it
ciscovcs-c02.unibocconi.it
b4i.unibocconi.it
exchange.unibocconi.it
idp.unibocconi.it
hosting.bluera.com
wordify.unibocconi.it
pmserver12.unibocconi.it

Certificate

The complete raw certificate details for *.lib.unibocconi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHeTCCBWGgAwIBAgIRAJGrFm9+PXJnL+i38DoG0howDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDIyNzAwMDAwMFoXDTI0MDIyNzIz
NTk1OVowbzELMAkGA1UEBhMCSVQxEjAQBgNVBAgTCUxvbWJhcmRpYTEuMCwGA1UE
CgwlVW5pdmVyc2l0w6AgQ29tbWVyY2lhbGUgTHVpZ2kgQm9jY29uaTEcMBoGA1UE
AwwTKi5saWIudW5pYm9jY29uaS5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAMv/Ix95bI4O6U0mBt6ViF07Bv1YWrDeGmHGYEzHqSMcixeJAWXoJK+e
TqWeuuKdsTR8uPZPW0O4LQMDgsDJl9ukuL0cPX3sJh+k+oG/cGXMm2eBvHglgu8g
7lyh0MJZd97LxcAevhmWOJdvnTHgVdxoAVO/OXgdFEF65rCJwQ8Kasx6ayTlDsUq
XCRNuXc5/FIxzuYLyXKz0DTEqT5WvcaWKSdWVvZ+DEqkmbmnO5ds3Kr2sdj+Ks/7
3jSm1a3GYhec3Jsoj6bLJkX3ykN1sO0iPNbBmu50+lUb0lAc4e+/DqOjP9md/cRl
bJ+228lW6iAxyF+boIapDTC58iqoeqkCAwEAAaOCAzkwggM1MB8GA1UdIwQYMBaA
FG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBSQVQzY1NMenSrbobdtmHo3
dHQBuTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMG
CCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYD
VR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFO
VE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6
Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYB
BQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMIIBfgYKKwYBBAHW
eQIEAgSCAW4EggFqAWgAdQB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6
dAAAAYaR73biAAAEAwBGMEQCIF2t9kU0WzPErWMdLHQt/uEYWp407IohpHYVvKyy
7ydPAiAgNjTAonDU1esLER4ma6ozj3q5irPnqbPaJUE7m2SZugB3ANq2v2s/tbYi
n5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABhpHvdzwAAAQDAEgwRgIhAP5c9xDP
hpV78Y8WWfprI0EhNidrJ9dbdtmzSzTRDiNoAiEAgQnLP8URxLG/Lz/fLs+Nu79W
kOCLZAo+cKAKCpxVlvQAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1
mwAAAYaR73cPAAAEAwBHMEUCIAbznKK3e8gl7bo2Gohz9zGrOY7pEFrYLCm53crA
kR3nAiEAj6AzXmK3n8lVDr2wRwQgc7Zfq3XiwSV/3JauJYGljqkwMQYDVR0RBCow
KIITKi5saWIudW5pYm9jY29uaS5pdIIRbGliLnVuaWJvY2NvbmkuaXQwDQYJKoZI
hvcNAQEMBQADggIBAJtS1h5qpdxbBSoQRQHhoa1A9xE3RBjKEjWlStKZzHGBhwp2
8xupJD7RlE/evF5wSu641oi41Wk9UeQbBhAWzehrU4JcPrt6Y8Zirbd22KLJRfrs
y2/rIu401FmF79QSdgGIvqIU56/0Vdxojrs2rVc+F3AOV6jGlCjMujf5cIv0fYPn
lNIvAIsFOavdEP6vQ61mCAcIRdBYKFLOBIU65+HiSNW3qsWiIbNE8ziBLzKJ+Vhg
A/RKmrl+CVTqAoBd/Mm2Dha0PMjtfVKltPzhR/KDKmfxAwba88kGmXlboq5D3NQY
TDuuwTQlByfxFca5lJ7JgujiL4hWhrH87sTGBqcGhyprxyOaTtE5vVZL3Mi3orcN
i12wa2clSTxjNA5UXaKCubIHKUVkRm86+2G2Bncv5n9mea/VytOJ+S4kYRb814QT
Ct7e3bInOvUZnVOD/WzXdffVKwce53PPYfutqfDwQJxwug0EI3UO1geAQJZ9btBo
QzU2G8bpaIvPKXEJThQXohu/XqD/TCdW9IL2D0GLeEGBnZq3OU3DHvD0eIuBPO9p
h0py0YJpZxH2DrFoMj+MZvN7pHS2IfiAmdnFbfQ3bM+Zyv6f6CeOmv7b7yXJubRR
Q2mdadoM2uEgDwDpbM+6xoLuMJwbVOYOtqlWvWjgDoxmNkD7Onl4xzh4NQjR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/8jH3lsjg7pTSYG3pWI
XTsG/VhasN4aYcZgTMepIxyLF4kBZegkr55OpZ664p2xNHy49k9bQ7gtAwOCwMmX
26S4vRw9fewmH6T6gb9wZcybZ4G8eCWC7yDuXKHQwll33svFwB6+GZY4l2+dMeBV
3GgBU785eB0UQXrmsInBDwpqzHprJOUOxSpcJE25dzn8UjHO5gvJcrPQNMSpPla9
xpYpJ1ZW9n4MSqSZuac7l2zcqvax2P4qz/veNKbVrcZiF5zcmyiPpssmRffKQ3Ww
7SI81sGa7nT6VRvSUBzh778Oo6M/2Z39xGVsn7bbyVbqIDHIX5ughqkNMLnyKqh6
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 193626397198028972481353407463244091930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lombardia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Università Commerciale Luigi Bocconi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lib.unibocconi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25752188750050515464198078129744989873327663576015674085298302523298838076279771519421246711406115712165011456951467739622133474218596002352801993030321882661617933503251373477653726965865677362833098045850573964276371743324708642707766745367974658713258932162122148931441011141912557720447921661941396938142558050190546007560414713326535296622606716897326800609681372288127877093111238272997779561375030752501383297326663908307699216634387229902664065626237872401569229421449217265300745955557515070315621241709370536400702748311237762988533705751392730254485216778173619506086227853580802176577487656078362620230313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90550cd8d4d31e9d2adba1b76d987a37747401b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lib.unibocconi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lib.unibocconi.it'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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