tornado-p-https.web.leidenuniv.nl

- Universiteit Leiden -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 07:a9:61:0a:dd:8a:a9:83:5a:e6:09:31:c4:5b:9b:14 was issued on by TERENA.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit Leiden

Organization: Universiteit Leiden
Locality: Leiden
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 07:a9:61:0a:dd:8a:a9:83:5a:e6:09:31:c4:5b:9b:14
Serial Number (int): 10184062394163795770855892578102647572
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 80:7c:dc:db:e2:ab:20:44:3f:4c:5d:74:ad:d8:a7:38:bd:65:ee:a2
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): a8:42:10:37:70:4e:fc:19:98:64:45:f2:c8:e4:2d:85:3b:22:2e:64
Fingerprint (sha256): 2f:b9:ab:1a:ed:dc:79:47:ad:7e:b2:34:53:e3:81:f0:7b:58:01:69:b8:0f:39:43:5c:f7:06:3a:5b:8a:9e:cf

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate tornado-p-https.web.leidenuniv.nl

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tornado-p-https.web.leidenuniv.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spotvogel-p.web.leidenuniv.nl
roepieroepie-p.web.leidenuniv.nl
tornado-p-https.web.leidenuniv.nl
atc-database.leidenuniv.nl
www.atc-database.leidenuniv.nl
fishfacility.leidenuniv.nl
www.fishfacility.leidenuniv.nl
mieneke.leidenuniv.nl
www.mieneke.leidenuniv.nl
phpmyadmin-1-p.leidenuniv.nl
www.phpmyadmin-1-p.leidenuniv.nl
physiodatatoolbox.leidenuniv.nl
www.physiodatatoolbox.leidenuniv.nl
scriptiebeoordeling-hum.leidenuniv.nl
www.scriptiebeoordeling-hum.leidenuniv.nl
sharedtaste.leidenuniv.nl
www.sharedtaste.leidenuniv.nl
stagedatabase-hum.leidenuniv.nl
www.stagedatabase-hum.leidenuniv.nl
prosobab.leidenuniv.nl
www.prosobab.leidenuniv.nl
lacdrvirtuallab.leidenuniv.nl
www.lacdrvirtuallab.leidenuniv.nl
travel.leidenuniv.nl
www.travel.leidenuniv.nl
bookandbyte.universiteitleiden.nl
www.bookandbyte.universiteitleiden.nl
numerusfixus.universiteitleiden.nl
www.numerusfixus.universiteitleiden.nl
cil.universiteitleiden.nl
www.cil.universiteitleiden.nl
www.cil.liacs.nl
cil.liacs.nl
indonesie.universiteitleiden.nl
www.indonesie.universiteitleiden.nl
tdm.universiteitleiden.nl
www.tdm.universiteitleiden.nl
depthoffield.universiteitleiden.nl
www.depthoffield.universiteitleiden.nl
theory.liacs.nl
www.theory.liacs.nl
hortus-p.leidenuniv.nl
www.hortus-p.leidenuniv.nl
hortus.leidenuniv.nl
www.hortus.leidenuniv.nl
hortusleiden.nl
www.hortusleiden.nl
iranturan.leiden.edu
nonsolus.leiden.edu
researchsupport-fsw.universiteitleiden.nl
www.nonsolus.leiden.edu
www.researchsupport-fsw.universiteitleiden.nl
isga-research-evaluation.leidenuniv.nl

Other certificates including the domain name leidenuniv.nl

(limited to 100 certificates)
web2print.leidenuniv.nl
nmr.leidenuniv.nl
marishead.lorentz.leidenuniv.nl
leidenlawblog.nl
scharrelaar-p1.leidenuniv.nl
cas.physics.leidenuniv.nl
ppsn2020.liacs.leidenuniv.nl
datamining.liacs.leidenuniv.nl
issc.leidenuniv.nl
tornado-p-https.web.leidenuniv.nl
lucris.leidenuniv.nl
celspin-p.issc.leidenuniv.nl
foreman-develop.infra.leidenuniv.nl
leidenuniv.nl
SALMS01.leidenuniv.nl
director1-dev.srvtest.leidenuniv.nl
icga.leidenuniv.nl
uaccess.leidenuniv.nl
jira.issc.leidenuniv.nl
prosobab.leidenuniv.nl
scriptiebeoordeling-hum.leidenuniv.nl
www.math.leidenuniv.nl
Planon-BenO-t.leidenuniv.nl
login.uaccess.leidenuniv.nl
vrops-cluster.luci.leidenuniv.nl
issc.leidenuniv.nl
noah.backup.leidenuniv.nl
u-ldap-dev.srvtest.leidenuniv.nl
p-luci-001131.infra.leidenuniv.nl
zweepspin-p.issc.leidenuniv.nl
socrates.leidenuniv.nl
uaccess.leidenuniv.nl
tornado-a-https.web.leidenuniv.nl
leidenuniv.nl
lacdrvirtuallab-qa.leidenuniv.nl
sapgax.issc.leidenuniv.nl
vg5.strw.leidenuniv.nl
marishead.lorentz.leidenuniv.nl
avior.math.leidenuniv.nl
blackboardstaging.leidenuniv.nl
weblectures-a.leidenuniv.nl
usis.leidenuniv.nl
strwmail.strw.leidenuniv.nl
sapeca.leidenuniv.nl
phdcareerplatform.universiteitleiden.nl
u-tools.srvtest.leidenuniv.nl
aristotle.leidenuniv.nl
sapsra.leidenuniv.nl
www.strw.leidenuniv.nl
jss.leidenuniv.nl
mail.physics.leidenuniv.nl
mysite.leidenuniv.nl
kwartel-a.leidenuniv.nl
p-issc-007122.vuw.leidenuniv.nl
splbs02.vuw.leidenuniv.nl
huisstijl.leidenuniv.nl
form.services.universiteitleiden.nl
wagner-p.leidenuniv.nl
pontus.lorentz.leidenuniv.nl
leidenarthistoryblog.nl
smtp.leidenuniv.nl
studiegids-p.leidenuniv.nl
ooievaar.web.leidenuniv.nl
spapp30.vuw.leidenuniv.nl
saufb01.vuw.leidenuniv.nl
schildspin-dev.issc.leidenuniv.nl
lms-wyn-disp03.issc.leidenuniv.nl
raf-qa.law.leidenuniv.nl
lists.leidenuniv.nl
zweepspin-p.issc.leidenuniv.nl
webdav.leidenuniv.nl
scharrelaar-p3.leidenuniv.nl
helpdesk.universiteitleiden.nl
libcblog.nl
phdtrack-a.leidenuniv.nl
teams.leidenuniv.nl
evasys.leidenuniv.nl
x-ldap.leidenuniv.nl
cups.issc.leidenuniv.nl
uaccess.leidenuniv.nl
europeanbordercommunities.eu
science.leidenuniv.nl
vg5.strw.leidenuniv.nl
*.weblog.leidenuniv.nl
strwmgmt.strw.leidenuniv.nl
cms-a.universiteitleiden.nl
splic09.ilo.leidenuniv.nl
*.weblog.leidenuniv.nl
pinkashaw-o4.iam-ota.leidenuniv.nl
bankiva.leidenuniv.nl
rds-a.campus.leidenuniv.nl
phdtrack.leidenuniv.nl
planon-a.universiteitleiden.nl
jack-qa.web.leidenuniv.nl
web2print-t.leidenuniv.nl
grasparkiet.leidenuniv.nl
filosofie.leidenuniv.nl
jenkins.issc.leidenuniv.nl
www.readeronline.leidenuniv.nl
illinois.meta.leidenuniv.nl

Certificate

The complete raw certificate details for tornado-p-https.web.leidenuniv.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AftnCdTlUobmNy1D+eQ
tch3D5AnGL+9G9kr6PnRhXFgputH5GPQ3NnOPdSfRn2ZYGE3DdDspP4FMXky8jYo
Lweri/hSU8E6oNJ/UlefGdJLbulz9eo+xEmI9Tx2NVVsFgm+SkcHQlS/hRAmaalH
/ISJfPT1Fw8vKMpWm/G/IgxWHnhP/MV4lqa5ty3h9w4gFRIVua4YuhtYo51TYtiR
UN2/+V013i9Zwt56gtbuLoxBLP622Lr412gjSAAjB8sIRaiSOlQ5qLE6p/68cPMW
FH823Xpu5N7d8VKVrivXTJ+bu+6p3Ba1ScIV/Y10bUrBSLDzPDYMVgfDs9Lpcsxh
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10184062394163795770855892578102647572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tornado-p-https.web.leidenuniv.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26261476956301332910973020318635346732355835237051883454303112510504291320540160348800524662576254091101585082207196878782366784326997818742306341459463805284123377573245702967553554743729330318492929876114396329045882242020753556210734911218376578004933002311384999677907882881541091854112722422450825472775990662874698763064526938884308399095804342274283324011480716866187158601530515409459929955193271945696733418843149371779154256075110928239614768041576922749020819904517163388517387576172427674017787970419856243712011961534726842873426702973778156088462802405142617947959390559086714740332117415402112702767371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							807cdcdbe2ab20443f4c5d74add8a738bd65eea2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1602 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotvogel-p.web.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roepieroepie-p.web.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tornado-p-https.web.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atc-database.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atc-database.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishfacility.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fishfacility.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mieneke.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mieneke.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phpmyadmin-1-p.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phpmyadmin-1-p.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physiodatatoolbox.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.physiodatatoolbox.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptiebeoordeling-hum.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scriptiebeoordeling-hum.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedtaste.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharedtaste.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagedatabase-hum.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagedatabase-hum.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosobab.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prosobab.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacdrvirtuallab.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacdrvirtuallab.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookandbyte.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookandbyte.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numerusfixus.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.numerusfixus.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cil.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cil.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cil.liacs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cil.liacs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesie.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indonesie.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdm.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdm.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depthoffield.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depthoffield.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theory.liacs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theory.liacs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hortus-p.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hortus-p.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hortus.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hortus.leidenuniv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hortusleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hortusleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iranturan.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonsolus.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchsupport-fsw.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonsolus.leiden.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.researchsupport-fsw.universiteitleiden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isga-research-evaluation.leidenuniv.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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