depthoffield.universiteitleiden.nl

- Universiteit Leiden -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 35:9c:cc:70:a6:52:ed:b8:22:74:53:b2:3e:58:9c:53 was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Universiteit Leiden

Organization: Universiteit Leiden
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 35:9c:cc:70:a6:52:ed:b8:22:74:53:b2:3e:58:9c:53
Serial Number (int): 71263228623120087057416559327117352019
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b6:36:10:a5:3f:a6:0b:9e:4e:1e:d2:6e:7e:2c:82:52:81:36:d2:e0
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 81:00:86:4c:5e:da:6c:10:f6:fe:1d:22:48:a5:aa:ab:01:dd:7d:fb
Fingerprint (sha256): 38:3b:c3:1d:94:b9:e9:78:ea:7e:17:e0:86:27:02:ec:7a:b1:28:41:ff:36:9d:99:a8:4b:fc:e7:24:15:76:13

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate depthoffield.universiteitleiden.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for depthoffield.universiteitleiden.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

depthoffield.universiteitleiden.nl

Other certificates including the domain name universiteitleiden.nl

(limited to 100 certificates)
bachelors.universiteitleiden.nl
scharrelaar-p1.leidenuniv.nl
springoffer.universiteitleiden.nl
weblectures-a.leidenuniv.nl
phdcareerplatform.universiteitleiden.nl
mentornetwerk.universiteitleiden.nl
form.services.universiteitleiden.nl
mentornetwerk.universiteitleiden.nl
studiegids-p.leidenuniv.nl
ooievaar.web.leidenuniv.nl
scharrelaar-p3.leidenuniv.nl
helpdesk.universiteitleiden.nl
depthoffield.universiteitleiden.nl
aqa.universiteitleiden.nl
acquisitions.library.universiteitleiden.nl
cms-a.universiteitleiden.nl
planon-a.universiteitleiden.nl
web.universiteitleiden.nl
grasparkiet.leidenuniv.nl
aqa.universiteitleiden.nl
trail.universiteitleiden.nl
cms.universiteitleiden.nl
depthoffield.universiteitleiden.nl
www.universiteitleiden.nl
masters.universiteitleiden.nl
sapbo-acc.universiteitleiden.nl
planon-t.universiteitleiden.nl
ooievaar.web.leidenuniv.nl
ask-a-librarian.universiteitleiden.nl
scharrelaar-p3.leidenuniv.nl
presto-a.universiteitleiden.nl
grasparkiet.leidenuniv.nl
webpresentations-a.universiteitleiden.nl
mentornetwerk.universiteitleiden.nl
mfa.services.universiteitleiden.nl
mysites.universiteitleiden.nl
bachelors.universiteitleiden.nl
tornado-p-https.web.leidenuniv.nl
mfa-a.services.universiteitleiden.nl
www.jotform3.leidenuniv.nl
finder.library.universiteitleiden.nl
scriptiebeoordeling-law.universiteitleiden.nl
planon.universiteitleiden.nl
redirectservice.universiteitleiden.nl
wiki.cfer.universiteitleiden.nl
tornado-p-https.web.leidenuniv.nl
tornado-p-https.web.leidenuniv.nl
wbs.universiteitleiden.nl
tdm.universiteitleiden.nl
video.universiteitleiden.nl
planon.universiteitleiden.nl
aqa.universiteitleiden.nl
lu-card-activeren-a.universiteitleiden.nl
studiegids.universiteitleiden.nl
tornado-p-https.web.leidenuniv.nl
video.universiteitleiden.nl
helpdesk-o.universiteitleiden.nl
mentornetwerk.universiteitleiden.nl
phdcareerplatform.universiteitleiden.nl
planon-a.universiteitleiden.nl
lenteactie.universiteitleiden.nl
aqa.universiteitleiden.nl
acquisitions.library.universiteitleiden.nl
aqa.universiteitleiden.nl
benb.universiteitleiden.nl
aqa.universiteitleiden.nl
aqa.universiteitleiden.nl
topaza-t.leidenuniv.nl
www-r.universiteitleiden.nl
omeroweb.services.universiteitleiden.nl
kokmeeuw.leidenuniv.nl
aqa.universiteitleiden.nl
indonesie.universiteitleiden.nl
gitlab.services.universiteitleiden.nl
scharrelaar-p3.leidenuniv.nl
studyspots.universiteitleiden.nl
mfa-a.services.universiteitleiden.nl
phdcareerplatform.universiteitleiden.nl
grasparkiet.leidenuniv.nl
rooster.universiteitleiden.nl
tornado-p-https.web.leidenuniv.nl
jatos.services.universiteitleiden.nl
webpresentations.universiteitleiden.nl
bookandbyte.universiteitleiden.nl
hop-qa.leidenuniv.nl
brightspacesupport.universiteitleiden.nl
sshgw01.alice.universiteitleiden.nl
numerusfixus.universiteitleiden.nl
weblectures.leidenuniv.nl
aqa.universiteitleiden.nl
account-a.services.universiteitleiden.nl
p-issc-009996.infra.leidenuniv.nl
jatos-t.services.universiteitleiden.nl
finder.library.universiteitleiden.nl
aqa.universiteitleiden.nl
lithium.liacs.nl
scharrelaar-p1.leidenuniv.nl
depthoffield.universiteitleiden.nl
indonesie.universiteitleiden.nl
aqa.universiteitleiden.nl

Certificate

The complete raw certificate details for depthoffield.universiteitleiden.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuQUBMKkUc83UFN4pMxLP
YXWR36vRViItBsFpj4zJ1S7rG9gCMCoNvRDSjJ0sj/FlgWhx3ETqtoJTSm158ZNC
39S02JHSLA0Y1rG6/612oPeqIkSNVk2yI0DqmWo/3qKEHgQQrO4cmFjNUoIwhInj
79KjjCBHJTEK7xWJPXX/rE2KNJdDJ8hydQ5+XRL+gn+MBzUuhPbcmJwWcwMc/y08
1I0GNDl+iO/2mSOwrXaA2eq5caPM0y/woSGZcjuVkFB1oyuHcVMqESmBQXsIII/e
PF8wpGUMOyxvF+Q/25CVbgRhUV7YKI4CJ1IYsubMFatxd8cc4t3NfFkRFlN5QgBe
4mdGU3MGKiwBes9V/De7G46rc9oWikeo76z8Nhjg6gbWTfdh0ka0ZoAWmzm4EV5e
Ru22iyTtaYdc65YQqooIA95mAZEEzW9YQaxHngJsqjAcPiUTGtw0LgFlZisEvRjJ
rhbJ7efUQ8yKbGPitLU+tcrB7ww/Dz0BTfMyjtVwybSf9/q+N0wVXQf7JBbsVQT5
UlvNKgt72p8EDYy17HYrZl5hpsZrq8gWV5RkEd7H3s8Dyw+Iq2CNYxhLB6AOJL2I
ARS4Nc05Dx2df3hWXO01PcLMVH5Q3fMUYHdtwSle2EjdQ/vFSUxqgutdqMFm4Sc8
nLfo2B960V6B63SQpcq5f6kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71263228623120087057416559327117352019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'depthoffield.universiteitleiden.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754813907214913863317530887753950517998847691824333445817559606113468935212373465914461785146966990378727896976321386335927694913268842013363979225948086593255450196062231460046645694086625812746919684752650941125100031849880974150892587428566537298006614820782047751032743079288201489403129426353443518123478975048725367589097423985619166616399868275856753596758141447726889689797251622029269332800442588103499467679143266659614683274821364955746781193640668578667671557401324456725279884391855308836832102725433712118446775108191910774356722827274641965104033433982711608394324819498652971436035883221546808776134286437916567879167841010266523622846816256758157186376125547059511846185394241632819646796505746709471524940037818469496415677526157433689167731100887083332178025112256335580326092751695339644203174492605157358315811350353989867461872386937566063985965084354427995084386977939022940307837322001205381025657805512609142382949146293703688100914039115438034350741823644525575524166427764958160075830847926570825087735445532850063620684962036335331864826583440364600431719440280864177499006537785230629100002912094309043562927876218753602635404529816871113497310561637480132234290856445933176166456152045361826745154109353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b63610a53fa60b9e4e1ed26e7e2c82528136d2e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depthoffield.universiteitleiden.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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