ex2016-acc-uva.lb.uha.nl

- Universiteit van Amsterdam -

Issued by TERENA SSL High Assurance CA 3

About this certificate

This digital certificate with serial number 03:3c:c2:35:fc:90:b5:5e:9a:e4:fe:54:d6:33:0e:cf was issued on by TERENA.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit van Amsterdam

Company registration number: 34370207
Organization: Universiteit van Amsterdam
Organization unit: ICT Services
Locality: Amsterdam
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:c2:35:fc:90:b5:5e:9a:e4:fe:54:d6:33:0e:cf
Serial Number (int): 4303160863587723242987520856312450767
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4f:a6:9b:4e:a5:86:e5:8f:a0:c6:92:7a:d2:4b:96:64:4e:4f:b8:52
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9

Fingerprint (sha1): 1a:ad:29:5f:80:c3:7b:cc:bd:b3:be:b9:53:ec:2d:3b:bb:7b:7e:1a
Fingerprint (sha256): 39:4c:c7:11:bb:4e:40:f6:83:d2:48:e4:9e:f0:f4:a8:56:f3:3f:45:d8:af:10:27:53:41:1f:d6:a9:b2:1b:ef

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl

Check the revocation status for certificate ex2016-acc-uva.lb.uha.nl

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ex2016-acc-uva.lb.uha.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ex2016-acc-uva.lb.uha.nl
ex2016-acc-uva.lb.uva.nl
s-res.webmail.uva.nl
webmail.s-res.uva.nl
webmail.s-root.foret.nl
webmail.acc.hva.nl
webmailtest.s-res.uva.nl
legacy.s-res.uva.nl
legacy.acc.hva.nl
as.s-res.uva.nl
activesync.s-res.uva.nl
autodiscover.ic-icdlab.uva.nl
autodiscover.usc.s-res.uva.nl
autodiscover.seo.s-res.uva.nl
autodiscover.aup.s-res.uva.nl
autodiscover.s-root.foret.nl
autodiscover.s-res.uva.nl
autodiscover.senior.s-res.uva.nl
autodiscover.crea.s-res.uva.nl
autodiscover.dia.s-res.uva.nl
autodiscover.eti.s-res.uva.nl
autodiscover.folia.s-res.uva.nl
autodiscover.tinbergen.s-res.uva.nl
autodiscover.cedla.s-res.uva.nl
autodiscover.mailfiltertest.uva.nl
autodiscover.acc.hva.nl
autodiscover.uva-hva.s-res.uva.nl
autodiscover.amsterdamuas.s-res.uva.nl

Other certificates including the domain name uha.nl

(limited to 100 certificates)
radius-acc-authus1.net.uha.nl
vpn-acc-dc-01.net.uha.nl
ex2016-prd-hva.lb.uva.nl
beheervpn-prd.net.uha.nl
ex2016-acc-hva.lb.uha.nl
ex2016-prd-uva.lb.uva.nl
hva.nl
netauth-prd1.net.uha.nl
infoblox.net.uha.nl
authus-acc.net.uha.nl
vpn-dc-01.net.uha.nl
ex2016-acc-uva.lb.uha.nl
netdisco-acc1.forux.nl
radius-prd-authus1.net.uha.nl
netauth-prd.lb.uha.nl
netauth-prd1.net.uha.nl
netauth-prd.lb.uha.nl
fortimanager.net.uha.nl
lb-dc-1.net.uva.nl
ex2016-prd-hva.lb.uha.nl
lb-dc-1.net.uva.nl
fw-gbs-01.net.uha.nl
ex2016-prd-uva.lb.uva.nl
ex2016-prd-hva.lb.uva.nl
iris.ic.uva.nl
oim-prd-be.lb.uha.nl
ex2016-prd-hva.lb.uha.nl
netauth-prd2.net.uha.nl
smtp-prd.lb.uha.nl
authus-prd.net.uha.nl
netauth-prd2.net.uha.nl
ex2016-acc-hva.lb.uha.nl
radius-prd-authus1.net.uha.nl
radius-acc-authus2.net.uha.nl
fortimanager.net.uha.nl
oim-acc-be.lb.uha.nl
smtp-prd3.forux.nl
smtp-prd.lb.uha.nl
hva.nl
radius-prd-authus2.net.uha.nl
netauth-prd1.net.uha.nl
radius-acc-authus2.net.uha.nl
ex2016-prd-uva.lb.uva.nl
authus-dev.net.uha.nl
smtp-prd3.forux.nl
authus-acc.net.uha.nl
authus-prd.net.uha.nl
radius-prd-authus2.net.uha.nl
lb-dc-1.net.uva.nl
nf-store.ic.uva.nl
ex2016-prd-uva.lb.uva.nl
radius-acc-authus1.net.uha.nl
netauth-prd1.net.uha.nl
fortianalyzer.net.uha.nl
netauth-prd.lb.uha.nl
hiab-prd1.mgmt.uha.nl

Certificate

The complete raw certificate details for ex2016-acc-uva.lb.uha.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ2jCCCMKgAwIBAgIQAzzCNfyQtV6a5P5U1jMOzzANBgkqhkiG9w0BAQsFADBz
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExJzAlBgNVBAMTHlRFUkVOQSBTU0wg
SGlnaCBBc3N1cmFuY2UgQ0EgMzAeFw0xOTA5MjYwMDAwMDBaFw0yMTA5MzAxMjAw
MDBaMIHEMRowGAYDVQQPDBFHb3Zlcm5tZW50IEVudGl0eTETMBEGCysGAQQBgjc8
AgEDEwJOTDERMA8GA1UEBRMIMzQzNzAyMDcxCzAJBgNVBAYTAk5MMRIwEAYDVQQH
EwlBbXN0ZXJkYW0xIzAhBgNVBAoTGlVuaXZlcnNpdGVpdCB2YW4gQW1zdGVyZGFt
MRUwEwYDVQQLEwxJQ1QgU2VydmljZXMxITAfBgNVBAMTGGV4MjAxNi1hY2MtdXZh
LmxiLnVoYS5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ/HeW4O
Em7+vz+qSe5OQHgPaIXB8sYExEZ/0ymZB8ybK3TuDx3Stds1fFL4SMAdOCYCmpiz
Ld3S2me9UyO2r90Nbghm9bQeUW6BAjme9ugDG5taDBNBmhFUWF50kj52sji6C1RB
xDsx1Stj+ztBUDSd21KKq0WC+pRsRnq0wdZItfn0DON+K7IvOSC9dppqEUKGjNuX
HIbCSgdEKrlj7/zIGiqxo08tw1t9s5UppWmqc6axkAp2Tevkn/APVmjC1k2m+gyJ
ED8ze3GM2Xff5Ul99NHbQNTxrTu+/a0tiz6F1U4IDYwoNl1aZECeaaMj4AdDaYHm
8HFLRczrXEHMz/HIZdryWTkydJehB7Qpx0OVgL4aElYEjokQcEU3QVZrWyNcuNc0
Iig66UqSTcVekcSQdz6M87Mzx9VjaRUUSxVHQE2kYHDVr5nTDNJODix2R5xbEx5L
5lE4Sg0Y2FRjZwdVsrHfNklv8Lnr7uAzRE7UPGlWsv/1hv8PMZmOgNxsqermPdMR
IyGp40t9TYEj47vGC6A70LdRS0VmHmnazd0WY+BSHrh/Dup8eior+uObKBimoMqz
Fmfz5vWRZv90f1wuceECsyyvusM62kuMS7N9KqzCD47DWEyb6DiDrbrgz+Jtubq4
u63gvb+ORu9qfCAKwWqNeJcnTHFy6ZnVFcoDAgMBAAGjggUWMIIFEjAfBgNVHSME
GDAWgBTCuIXX4bkTvdFIvP1e3H2QQnqKqTAdBgNVHQ4EFgQUT6abTqWG5Y+gxpJ6
0kuWZE5PuFIwggMqBgNVHREEggMhMIIDHYIYZXgyMDE2LWFjYy11dmEubGIudWhh
Lm5sghhleDIwMTYtYWNjLXV2YS5sYi51dmEubmyCFHMtcmVzLndlYm1haWwudXZh
Lm5sghR3ZWJtYWlsLnMtcmVzLnV2YS5ubIIXd2VibWFpbC5zLXJvb3QuZm9yZXQu
bmyCEndlYm1haWwuYWNjLmh2YS5ubIIYd2VibWFpbHRlc3Qucy1yZXMudXZhLm5s
ghNsZWdhY3kucy1yZXMudXZhLm5sghFsZWdhY3kuYWNjLmh2YS5ubIIPYXMucy1y
ZXMudXZhLm5sghdhY3RpdmVzeW5jLnMtcmVzLnV2YS5ubIIdYXV0b2Rpc2NvdmVy
LmljLWljZGxhYi51dmEubmyCHWF1dG9kaXNjb3Zlci51c2Mucy1yZXMudXZhLm5s
gh1hdXRvZGlzY292ZXIuc2VvLnMtcmVzLnV2YS5ubIIdYXV0b2Rpc2NvdmVyLmF1
cC5zLXJlcy51dmEubmyCHGF1dG9kaXNjb3Zlci5zLXJvb3QuZm9yZXQubmyCGWF1
dG9kaXNjb3Zlci5zLXJlcy51dmEubmyCIGF1dG9kaXNjb3Zlci5zZW5pb3Iucy1y
ZXMudXZhLm5sgh5hdXRvZGlzY292ZXIuY3JlYS5zLXJlcy51dmEubmyCHWF1dG9k
aXNjb3Zlci5kaWEucy1yZXMudXZhLm5sgh1hdXRvZGlzY292ZXIuZXRpLnMtcmVz
LnV2YS5ubIIfYXV0b2Rpc2NvdmVyLmZvbGlhLnMtcmVzLnV2YS5ubIIjYXV0b2Rp
c2NvdmVyLnRpbmJlcmdlbi5zLXJlcy51dmEubmyCH2F1dG9kaXNjb3Zlci5jZWRs
YS5zLXJlcy51dmEubmyCImF1dG9kaXNjb3Zlci5tYWlsZmlsdGVydGVzdC51dmEu
bmyCF2F1dG9kaXNjb3Zlci5hY2MuaHZhLm5sgiFhdXRvZGlzY292ZXIudXZhLWh2
YS5zLXJlcy51dmEubmyCJmF1dG9kaXNjb3Zlci5hbXN0ZXJkYW11YXMucy1yZXMu
dXZhLm5sMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwgYUGA1UdHwR+MHwwPKA6oDiGNmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
bS9URVJFTkFTU0xIaWdoQXNzdXJhbmNlQ0EzLmNybDA8oDqgOIY2aHR0cDovL2Ny
bDQuZGlnaWNlcnQuY29tL1RFUkVOQVNTTEhpZ2hBc3N1cmFuY2VDQTMuY3JsMEsG
A1UdIAREMEIwNwYJYIZIAYb9bAIBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMwBwYFZ4EMAQEwewYIKwYBBQUHAQEEbzBtMCQGCCsG
AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRQYIKwYBBQUHMAKGOWh0
dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9URVJFTkFTU0xIaWdoQXNzdXJhbmNl
Q0EzLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQAAKewkyYleVEKYBGWq0w5hkt+qnvelBn7SRIO2hanP7iRJ
FaQXS+xGhUKvOzN8PvnvswL8TwqFxPX0WqG5Ui7pX/hDtRXCfZL6XAcWbenbVd1Q
Bs5UCv455DaUpIS3w/s8Rq7gRIq4ifzLJpFKn+sbUP2/yoO6ALYuoamz/4TIcfBX
8ambeSRmO8XYOgzO3Jt5UjG9/jKnd4C0CFIJ09ita1duGPElUOk6xOvD9FBpWa6S
iptXs6F67XLKiT4Gmf56xv8T7pPu3lrh7XXOZPDDq0dmbQVSmeC7S6COxoVBJgEb
a9nvAnxin+YY3RcmTPT9aOEhnIWdKpwcQLFq6kKy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4303160863587723242987520856312450767
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '34370207'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ex2016-acc-uva.lb.uha.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651842251697119999751044830418662227233199561324054699030449316362333441050278359865310619403833844400999189582004424422731293050942549426070960762755241843625546235375219415863679878590243300234039952160840897326833522651405478924358145048269302064154492793638811089646443637867455731339272126761267315519642764519114676337929273109005873094771819484297484524780831472171157932535270686860684533310421670022484135882021627310723131072040012896156886651822074392671786818998247543236367385909241632818494947329619668023558267604120000810496593763508090436707800427093865936673399327812390705116548210974074835157404113279712523414823465767586799462537449350852806952769112294924920601377810315932442124510743547186395497786799125761666147200881294997653073315183760448233048157283409686937102269035279371812271106981265268805701350094031203060639927041019939184825191819332037237359629608541144456878144641227763895243610484135806477268980850353698932984753035815968192140466500526162971373298024652759189369340143344424693141594344388674962636872768506071981347784803281254881323734374284394264762034763857090315576619902134259668332758193558265287271156793474171253489486751498545892895279457903367559880901942061623329861498423811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fa69b4ea586e58fa0c6927ad24b96644e4fb852
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (801 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex2016-acc-uva.lb.uha.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex2016-acc-uva.lb.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-res.webmail.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.s-root.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.acc.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmailtest.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.acc.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesync.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ic-icdlab.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.usc.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.seo.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.aup.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.s-root.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.senior.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.crea.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dia.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eti.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.folia.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tinbergen.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cedla.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mailfiltertest.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.acc.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.uva-hva.s-res.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.amsterdamuas.s-res.uva.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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