hva.nl

- Stichting Hogeschool van Amsterdam -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number 1d:d7:a2:27:7b:19:40:04:85:0d:5d:d1:62:62:df:87 was issued on by Sectigo Limited.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Hogeschool van Amsterdam

Company registration number: 34215054
Organization: Stichting Hogeschool van Amsterdam
Address: Wibautstraat 3 B College va
Postal code: 1091 GH
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:d7:a2:27:7b:19:40:04:85:0d:5d:d1:62:62:df:87
Serial Number (int): 39667244580698859549607418532104167303
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 03:59:5f:6f:87:60:e9:18:31:34:39:df:29:77:b9:85:f8:11:56:b7
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): 32:7e:45:71:c0:39:c5:9f:cc:f8:3b:c1:02:9e:84:a7:b5:a1:70:4b
Fingerprint (sha256): 27:51:7f:91:63:c1:48:2c:0e:fd:49:72:29:7c:3d:d5:bf:a5:88:6f:13:5b:51:ca:ee:77:cc:71:2f:36:c3:eb

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate hva.nl

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hva.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hva.nl
amsterdamuas.com
foret.nl
forux.nl
ido-laad.com
ido-laad.nl
idolaad.com
idolaad.nl
lerarenopleidingenamsterdam.nl
mijnhva.nl
ot-euromaster.eu
ot-euromaster.nl
uha.nl
ureka.eu
uva-hva.nl
uva.nl

Other certificates including the domain name hva.nl

(limited to 100 certificates)
*.medialab.hva.nl
edit-intra.dbsv.hva.nl
projectonline.dmci.hva.nl
acc-moodle.ict.hva.nl
mobiusportal.uva.dev.icts.education
acc-login.hva.nl
onderwijsconferentie.hva.nl
resultaten.hva.nl
rbs.iscb.hva.nl
fbe-magazines.hva.nl
mi.hva.nl
acc-mi.hva.nl
gitlab.techniek.hva.nl
campus.dmci.hva.nl
stage.centuri.hva.nl
incapsula.com
stagedbsv.hva.nl
teams-prd-sbc1.hva.nl
roosterportal.hva.nl
edulab.fbe.hva.nl
unixbeheer.forux.nl
incapsula.com
rooster.hva.nl
openid.hva.nl
hva.nl
secure-apis.hva.nl
moodle.cmd.hva.nl
asl.techniek.hva.nl
prdcltech0003.ict.hva.nl
intra.sem.hva.nl
webdav-intra.doo.hva.nl
databanken.bibliotheek.hva.nl
ontw-intra.mim.hva.nl
pure.hva.nl
gartnerportal.uva.prd.icts.education
roosterportal.hva.nl
legacy.hva.nl
declaraties.hva.nl
api.declaraties-acc.hva.nl
cl.acc.hvaweb.formist.nl
id.hva.prd.icts.education
apps.hva.nl
moodle-prd-fdmci.lb.hva.nl
edulab.fbe.hva.nl
incapsula.com
login.hva.nl
sis.hva.nl
incapsula.com
onderwijslab.techniek.hva.nl
*.acceptatie.hva.nl
prdcltech0004.ict.hva.nl
intra.alo.hva.nl
ex2016-prd-hva.lb.uva.nl
incapsula.com
edit-intra.iam.hva.nl
devarchief.roxen.hva.nl
incapsula.com
sis.hva.nl
acc-moodle.ict.hva.nl
hvacms-acc-redactie.lb.uva.nl
recovery.ict.hva.nl
rps.hva.nl
aanmelden.hva.nl
hvacms-prd-www.lb.uva.nl
campuscreators.nl
www.excellentieprogramma.hva.nl
gartnerportal3.uva.dev.icts.education
ac.hva.nl
hva.nl
gitlab.dmci.hva.nl
idm-acc-conhva1.acc-ad.hva.nl
login.hva.nl
sis.hva.nl
mapleta-oefen.hva.nl
curriculum.techniek.hva.nl
www.lustrum.hva.nl
wivlog.ict.hva.nl
incapsula.com
vpxldaps.ad.hva.nl
hvacms-prd-redactie.lb.uva.nl
sis.hva.nl
gitlab.techniek.hva.nl
incapsula.com
hvacms-prd-fe.lb.hva.nl
moodle-dev-fdmci.lb.hva.nl
edit-hva-instituten.hva.nl
salto-acc-hva1.ad.hva.nl
stage.centuri.hva.nl
bscw.hva.nl
discord.informatica.hva.nl
tijdreg.hva.nl
*.acc-blogs.dmci.hva.nl
beheervpn-prd.net.uha.nl
intra.si.hva.nl
lyndaportal.fdmci.hva.nl
dlwo.dmci.hva.nl
vpn.hva.nl
asl.techniek.hva.nl
api.payment-acc.ict.hva.nl
login.hva.nl

Certificate

The complete raw certificate details for hva.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIrTCCB5WgAwIBAgIQHdeiJ3sZQASFDV3RYmLfhzANBgkqhkiG9w0BAQsFADCB
kTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTkwNwYDVQQD
EzBTZWN0aWdvIFJTQSBFeHRlbmRlZCBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
Q0EwHhcNMjAwNzAzMDAwMDAwWhcNMjEwODAyMjM1OTU5WjCB8zERMA8GA1UEBRMI
MzQyMTUwNTQxEzARBgsrBgEEAYI3PAIBAxMCTkwxGjAYBgNVBA8TEUdvdmVybm1l
bnQgRW50aXR5MQswCQYDVQQGEwJOTDEQMA4GA1UEERMHMTA5MSBHSDEWMBQGA1UE
CBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFtMSQwIgYDVQQJExtX
aWJhdXRzdHJhYXQgMyBCIENvbGxlZ2UgdmExKzApBgNVBAoTIlN0aWNodGluZyBI
b2dlc2Nob29sIHZhbiBBbXN0ZXJkYW0xDzANBgNVBAMTBmh2YS5ubDCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMYTrVLN0/OH7ukuRfKH94dkeYoYJZz9
7DGnc78b/PqOluHdCWn91VxTVjqVh3qda/ay/+6M5dRFvM++CZ0vbzE7Th6L7DaI
HibTkY0sCoHxjFI4MbXwm3GyVkrPfaXoHn7UCbCGOMNlFV28IuXRRtLaGf7RSsq9
H+PON3stVNsUoAi2JTYkcKqqgSNW7u8JovNBhQts2z3j17AltVfrqPbTpgg9nUcz
WcSwKGa0X75T1eWy5hYlzHxVa5db1VJ94g6kg99wiLqBvk8R5dz8o5qtx1UAuVa+
qf7SipzH0voMzn/Za3E01tQvKmMtQTVY8hF/Let5otXGW9VFKY5wzbu+yLrCOzw7
KDYfTMDJmiDlHc3YXwpM6VeaEqha/q0CG7rzLAP1jcSndMtQMfh3HRhdchQOW6N4
2PEg3zmFQ8Uz7y5CDgZuBc4/bS/C5Op/KKdrLBLA1Acs4P0wkDu4mhuf5Km1OXld
GgCk4If5CKm74tRnfrBRBJhtgdhmFZkaMJKVa6ZAvP28EnTKtDUbV608uq1blAol
sgaV4/wpV394z4Bk+uw+N455zGOyrYG55DJdTdWcotvch5s3Uw49SjdlvqpVqJq0
fHMZUEyE7nTymtZsIjqBD8P/EOLegK6KgE3vrYmrH2QHFnlp7fatriwoZQr2YV+1
WIu9ornsSeQnAgMBAAGjggObMIIDlzAfBgNVHSMEGDAWgBQsaf+AyYeQrjThtOdM
k4WZQOmnsjAdBgNVHQ4EFgQUA1lfb4dg6RgxNDnfKXe5hfgRVrcwDgYDVR0PAQH/
BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMEkGA1UdIARCMEAwNQYMKwYBBAGyMQECAQUBMCUwIwYIKwYBBQUHAgEWF2h0
dHBzOi8vc2VjdGlnby5jb20vQ1BTMAcGBWeBDAEBMFYGA1UdHwRPME0wS6BJoEeG
RWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQUV4dGVuZGVkVmFsaWRh
dGlvblNlY3VyZVNlcnZlckNBLmNybDCBhgYIKwYBBQUHAQEEejB4MFEGCCsGAQUF
BzAChkVodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FFeHRlbmRlZFZh
bGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9v
Y3NwLnNlY3RpZ28uY29tMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAfT7y+I//
iFVoJMLAyp5SiXkrxQ54CX8uapdomX4i8NcAAAFzFdNJ+AAABAMARzBFAiAmseIu
M5APX4h/h2MbKX8u3z8JMJjVeyRqennUdPtVMQIhALzm7PLE/iN3o1VB2ycv4RVc
eThC4nD9Na78RcGhuEucAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo3
2RMAAAFzFdNJ8AAABAMARzBFAiAq9forbyoOTkC2FQ3hlDrsWdSMSMvg/nMg1lFd
BKEwaAIhAIjYTSFStWJoZMJXyRaug4GZiiVcbJXINK5teaXv2S3wMIHjBgNVHREE
gdswgdiCBmh2YS5ubIIQYW1zdGVyZGFtdWFzLmNvbYIIZm9yZXQubmyCCGZvcnV4
Lm5sggxpZG8tbGFhZC5jb22CC2lkby1sYWFkLm5sggtpZG9sYWFkLmNvbYIKaWRv
bGFhZC5ubIIebGVyYXJlbm9wbGVpZGluZ2VuYW1zdGVyZGFtLm5sggptaWpuaHZh
Lm5sghBvdC1ldXJvbWFzdGVyLmV1ghBvdC1ldXJvbWFzdGVyLm5sggZ1aGEubmyC
CHVyZWthLmV1ggp1dmEtaHZhLm5sggZ1dmEubmwwDQYJKoZIhvcNAQELBQADggEB
AFyeYz9Wo+C9Hf1IwpEgKiWYTfjxkq95/qhP2zhStsROWMHSDxVfpGVOtrDsNlnH
sQ7wvv4kFurffCpaffDPTt2qJEE/OA1Q4PG7mDFd+bRgqMT3kbhqqSOXi6/f8IGC
j7NTKhmE+FdUHUy5vvF6A3PhSK6kCdAYJvymKyX8ghU9Q5V4P+R2NXuOd96ySM5L
7VNwk202jpNUNLmP1vXu0JnAaQmBsfXQhge7sO8T5b4lgyPhqJXaqp6CuS8e0SyU
ydRf1Xfr7pnOxWRoAeHoo8F31sGrH8LiSzrqo/CjXRZ+D0IpXJ0NCewUZBAzatF3
JbKj8uQ3piKaLNF3feuZdII=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39667244580698859549607418532104167303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '34215054'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1091 GH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wibautstraat 3 B College va'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Hogeschool van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hva.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808083101010350940959688202303751401947546926657762545371910608687006645033920206538650673261025952216601394555839714572818401040481842837400886485478196542887339049211992607350282664570884047501039115519986165585518005539818675708012003346882839139583375944203061431417460116860061753905296954378076469773275838472084000818535273535811143800223947854335101171799572741764760064063863635579539392173017751713204433252022334405573326099612583860771166570654794871876700834115324273259389668069662764946795927317112640471708044031309258470302731352527146181624352357294819547543824828311594058535422614688158995168285175041612923734776849759870500634938352655037890208463941543843177837174266963757393515005850416204162208675986278342319419924902728966406822115941308475265910677705001389211568497884144315480427902026790272424144949029431277248176619518639363929152072414215370535489531761865683077371028275741196534907262998908801156747259581665699749522744046343686376759338180391034903882882858441181835236625921043033419300103481890921184962762535609794435264756085362802032276795625046921199894173664747376468639475366080001312208234687012067809855806583334113210956535594428092144233790122287086977514177887641472195632531366951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03595f6f8760e918313439df2977b985f81156b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017315d349f80000040300473045022026b1e22e33900f5f887f87631b297f2edf3f093098d57b246a7a79d474fb5531022100bce6ecf2c4fe2377a35541db272fe1155c793842e270fd35aefc45c1a1b84b9c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017315d349f0000004030047304502202af5fa2b6f2a0e4e40b6150de1943aec59d48c48cbe0fe7320d6515d04a1306802210088d84d2152b5626864c257c916ae8381998a255c6c95c834ae6d79a5efd92df0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsterdamuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forux.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ido-laad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ido-laad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolaad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolaad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerarenopleidingenamsterdam.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnhva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ot-euromaster.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ot-euromaster.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uha.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ureka.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uva-hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uva.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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