vault.forux.nl

- Stichting Hogeschool van Amsterdam -

Issued by GEANT EV RSA CA 4

About this certificate

This digital certificate with serial number 7b:41:c5:bb:55:07:b8:2b:3e:f1:c4:ef:3c:6e:7a:89 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Hogeschool van Amsterdam

Company registration number: 34215054
Organization: Stichting Hogeschool van Amsterdam
State / Province: Noord-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:41:c5:bb:55:07:b8:2b:3e:f1:c4:ef:3c:6e:7a:89
Serial Number (int): 163836553254023283738257497538692020873
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 3a:24:44:be:af:9a:b4:d3:8f:d0:ce:bc:20:98:e1:0a:2b:7f:fc:bd
AuthorityKeyId: b6:20:0e:ae:a3:cb:e9:55:03:06:13:66:d4:ac:be:27:90:54:60:f3

Fingerprint (sha1): 15:a0:05:f0:5d:1a:e3:d7:6b:87:ce:a7:e5:fb:39:ab:df:22:07:6c
Fingerprint (sha256): 2a:47:34:38:12:27:41:6a:f9:0c:ad:98:a2:50:1c:13:71:e8:92:8c:c9:cf:83:2c:72:9f:6e:78:99:3b:81:b8

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl

Check the revocation status for certificate vault.forux.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vault.forux.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vault.forux.nl

Other certificates including the domain name forux.nl

(limited to 100 certificates)
sap-dev-rudx.ic.uva.nl
psql-prd1.forux.nl
sap-acc-ruax.ic.uva.nl
content-dev.sap.uva.nl
canvas-acc-apps2.forux.nl
gitlab-dev.forux.nl
moodle-prd-db1.forux.nl
unixbeheer.forux.nl
sap-prd-bupx.forux.nl
hva.nl
admin.uva.icts-dev-app1.aws.forux.nl
maven.ic.uva.nl
netbox.forux.nl
diensten.uba.uva.nl
moodle-prd-db1.forux.nl
canvas-acc-apps2.forux.nl
sap-prd-ffpx.forux.nl
aanmelden.hva.nl
netdisco-acc1.forux.nl
hva.nl
uvacms-tst-ic1.forux.nl
expenseclaims.uva.nl
airm-acc.forux.nl
psql-prd1.forux.nl
admin.hva.icts-dev-app1.aws.forux.nl
gitlab-dev.forux.nl
ipam-dev1.forux.nl
tsm.uva.nl
lamp-prd-dba1.forux.nl
uvacms-tst-fe1.forux.nl
uvacms-tst-ic1.forux.nl
tst-aanmelden.hva.nl
api.ocp-tst1.ocp2.forux.nl
api.expenseclaims.uva.nl
ocpidp-acc.lb.forux.nl
content.sap.uva.nl
ocpidp-prd.lb.forux.nl
content-acc.sap.uva.nl
web-prd-wordpress1.forux.nl
expenseclaims-acc.uva.nl
loadbalancer.icts-dev-app1.aws.forux.nl
hva.nl
tower.forux.nl
jira.ic.uva.nl
cas-acc4.forux.nl
api.ocp-prd1.ocp1.forux.nl
builder.ic.uva.nl
airm-acc.forux.nl
nra.sis.uva.nl
admin.uva.icts-dev-app1.aws.forux.nl
monitor.forux.nl
moodle-dev.fdmci.hva.nl
unixbeheer.forux.nl
tower-dev.forux.nl
m.sis.uva.nl
uvacms-tst-be1.forux.nl
uvacms-tst-fe1.forux.nl
sap-dev-budx.ic.uva.nl
integration-test.cms.uva.nl
content.sap.uva.nl
psql-prd1.forux.nl
hva.nl
cmx-prd-anonymizer1.forux.nl
content.sap.uva.nl
vault.forux.nl
canvas-tst-apps1.forux.nl
uvacms-tst-ic1.forux.nl
sap-dev-ffdx.forux.nl
tsm-dev.ic.uva.nl
kassa.hva.icts-dev-app1.aws.forux.nl
kassa.uva.icts-dev-app1.aws.forux.nl
ldap-dev.ic.uva.nl
tlscertmon-dev.forux.nl
a10-devx.forux.nl
psql-dev1.forux.nl
monitor.forux.nl
nessus-prd1.forux.nl
uvacms-prd-ic1.forux.nl
hvacms-acc-fe1.forux.nl
moodle-prd-db1.forux.nl
uvacms-acc-fe1.forux.nl
test.uba.uva.nl
oim-prd-fe1.forux.nl
gitlab-dev.forux.nl
moodle-prd-db1.forux.nl
ipam.forux.nl
lamp-prd-dba1.forux.nl
hvacms-acc-ic1.forux.nl
smtp-acc3.forux.nl
sap-prd-rupx.ic.uva.nl
netdisco-acc1.forux.nl
hvacms-acc-ic1.forux.nl
loadbalancer.icts-dev-app1.aws.forux.nl
canvas-acc-apps1.forux.nl
labservant.ic.uva.nl
sap-tst-ruzx.forux.nl
sap-prd-bupx.forux.nl
ubbis-prd-web1.forux.nl
hvacms-acc-be1.forux.nl
ubdpc-acc-web2.forux.nl

Certificate

The complete raw certificate details for vault.forux.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6ALBNy0wx8zMiw9vi+Gh
9abO7mS32PeeKC032hAcgDL1lZlvqKgjzu3CO3Ylgm1NiKGIjUgkdExZdgZpns4Y
OWwx5OIhJ3RCLeVx3W7h77Dmi4XQTMHJStPW+RI2IEtBt5ugw+gQZr07X2Y/K7FB
VuCoaX0ZR09WbI1ygdGtpLNoW8s9WZGH9bQ8dkgy8SwULFgbXZ/HY/T3D2vTqBJc
iavADW2ZbQ2XnY2/la4S32qBS9bKF3ji5dZ6uGHKEIgVPJr926soP7d4UY4uR8Kh
tX7EycrUe4QJYBK9CZUZpXDMesSVDtP88I/ErkcQmErYibFiahPfuBn9LzqglpOn
pw/OIOBpplK4CmNXCYWwiXA2t7l+3fOCak7Iq+eveZ8UsPDE1v8fXHUzm9r4f7ea
u6TT20QMcZ+X6y8zcqd9UL4aUlUzIoDJHHfy7k2vM1uh/rfMHpPS/uhFdqQ0P22q
QcBynwsNS2/Vq04Fx7+/MrJDpytW8wcBujaOFlUC+CG5hRSxIK6V3nnA9m1xr237
GaGRTYce9kpNd6xH9wX84QKYMPbEh6sM32ijcbKwdgChNd2ucdDFYaOjW76n6XL/
fYFd0OHE3FcfICyHLyJgrsD68Xd1NApkTr1XKrkppvHMEZHQWPbDyiQsl3UOMEdA
LLV7zAorIEUc5nZme6Wkas8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163836553254023283738257497538692020873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT EV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '34215054'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Hogeschool van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vault.forux.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946521323749650102493182247208768385933667479296429879114841961360582064425660852507195145036342156259160292307616785404835980744178806830970770001068795722216077545238647805682370462860204285458827413582665266295484971241947457690637614258607295437274978206192999715280610230024543263200820366807184162798451721388975108895539965147606477893347576100295714181423811742251542514192359088562396595542364426370007694505557355918980640851423994939092870271218848662147253402315544500101516022318498045207406958212897158150049290692688009795727738146037530391205431400594042082990459795040633549637142735065229745403606830625720569815041510037667238463051169588337246843493126599942205283847841603702014596591932811082402477618879672322016699163318892837801425316103898727889617290187818177624743566059704447760584253738264406359835703878648582026436437806762363124835647358513277138494176846187278008551998713801078230241672737499144495306816715293957884218381256728912794589796500277611531339093468438988881630519090534447126638947304146725928835739332785496307271314534879157901898326341353776772514393945129458806279100282287599609207967867753376660779574624447382764907046632688598831679764590947729489556285695251234345736944773839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6200eaea3cbe95503061366d4acbe27905460f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a2444beaf9ab4d38fd0cebc2098e10a2b7ffcbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vault.forux.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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