assist.tudelft.nl

- Technische Universiteit Delft -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 34:15:b7:cd:e5:25:0c:e2:a7:6b:f5:81:ae:e5:7a:15 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Delft

Organization: Technische Universiteit Delft
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 34:15:b7:cd:e5:25:0c:e2:a7:6b:f5:81:ae:e5:7a:15
Serial Number (int): 69232622008492498804913619656702786069
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f2:21:1a:fc:65:de:58:7b:80:36:59:01:ff:af:a1:42:37:86:75:bb
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 48:e5:a6:6a:0f:2d:ba:df:79:53:17:eb:ec:88:b8:26:b5:12:4c:10
Fingerprint (sha256): 3d:68:b1:d0:0c:a7:73:04:40:b1:91:d9:d2:8f:15:76:62:6c:c8:40:53:58:97:7d:15:bb:a0:e9:31:49:54:bb

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate assist.tudelft.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assist.tudelft.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assist.tudelft.nl
srv432.tudelft.net

Other certificates including the domain name tudelft.nl

(limited to 100 certificates)
solidstate.quantumtinkerer.tudelft.nl
api.p-cube.gamelab-staging.tbm.tudelft.nl
bepsys.ewi.tudelft.nl
webdsl-org.ewi.tudelft.nl
talentservices.tudelft.nl
wism8.dunet.tudelft.nl
www.pp1.tudelft.nl
suslabnwe-en.io.tudelft.nl
eipdev.ewi.tudelft.nl
quantumtinkerer.tudelft.nl
www.hooke.tudelft.nl
mattermost-imphys.tudelft.nl
3d.bk.tudelft.nl
hpcwiki.tudelft.nl
suslabnwe-de.io.tudelft.nl
externenmds.tudelft.nl
webdsl-2015.ewi.tudelft.nl
telefoonboek.tudelft.nl
searchenginewis2.ewi.tudelft.nl
se.ewi.tudelft.nl
ipms-prd1.tudelft.nl
bitrix24.tbm.tudelft.nl
punch.tudelft.nl
oauth-t.tudelft.nl
inforln.tudelft.nl
3d.bk.tudelft.nl
bktoi1.bk.tudelft.nl
abdowiki.tudelft.nl
www.broach.nl
webapp.tudelft.nl
demoprojects.tudelft.nl
telewerken.tudelft.nl
pl-jenkins.ewi.tudelft.nl
bbtest.tudelft.nl
marsrv.tudelft.nl
4tudata-libbuild.tudelft.nl
inforln.tudelft.nl
mod-est.tbm.tudelft.nl
coin2013-prima.tudelft.nl
syllabus.tudelft.nl
aecoderunner.lr.tudelft.nl
erfgoed.tudelft.nl
www.civielebedrijvendagen.nl
was.tudelft.nl
sysadminwiki.tudelft.nl
esb-gateway.tudelft.nl
www.vvtp.tudelft.nl
services.sc.tudelft.nl
3d.bk.tudelft.nl
campusdevelopment.tudelft.nl
marsrv.tudelft.nl
svn.3me.tudelft.nl
lamp6.tudelft.nl
svn.tnw.tudelft.nl
www.dined.nl
dutmail.tudelft.nl
b2bcrm.tudelft.nl
www.nas.ewi.tudelft.nl
b2bcrm.tudelft.nl
qutech.tudelft.nl
personeelsdossiers.tudelft.nl
zandmotor-libtest.tudelft.nl
www.beeldportal.tudelft.nl
labservant.tudelft.nl
lampict2.tudelft.nl
coursemaptest.tudelft.nl
se.ewi.tudelft.nl
presto.tudelft.nl
3d.bk.tudelft.nl
www.punch.tudelft.nl
reservation.ekl.tudelft.nl
qit.ewi.tudelft.nl
elearning-libprod.tudelft.nl
www.praktischestudie.nl
handler.tudelft.nl
matchmakers.ewi.tudelft.nl
newmediacentre.tudelft.nl
burgerbegroting.tbm.tudelft.nl
www.broach.nl
ismir2019.ewi.tudelft.nl
sg-4.tbm.tudelft.nl
srv775-2.tudelft.net
www.dcsc.tudelft.nl
ppm1.tudelft.nl
lts1-test.tbm.tudelft.nl
inclusivedesign.io.tudelft.nl
visit.tudelft.nl
eurasipdev.ewi.tudelft.nl
ei.tudelft.nl
elearning-libaccp.tudelft.nl
www.practischestudie.nl
api.myota-test.tudelft.nl
svn.bk.tudelft.nl
gnss1.tudelft.nl
luistermutant.gamelab.tbm.tudelft.nl
filr.tudelft.nl
trendhost-cb.tudelft.nl
www.punch.tudelft.nl
research.tudelft.nl
osidoc.tudelft.nl

Certificate

The complete raw certificate details for assist.tudelft.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHcTCCBVmgAwIBAgIQNBW3zeUlDOKna/WBruV6FTANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIxMTE2MDAwMDAwWhcNMjMxMTE2MjM1
OTU5WjBoMQswCQYDVQQGEwJOTDEVMBMGA1UECBMMWnVpZC1Ib2xsYW5kMSYwJAYD
VQQKEx1UZWNobmlzY2hlIFVuaXZlcnNpdGVpdCBEZWxmdDEaMBgGA1UEAxMRYXNz
aXN0LnR1ZGVsZnQubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf
u5eh3JSyNOToA5Ya69ao3bUOVxa+kLiKqE2hF4k1AGhRhgSFbjvdDKklpWd00Mmz
8T0vR+3HHZ6LbUbkBm32RTaOYW+0sgOTXc92IctPO64UtsEglqW5cIPtYttGCyPg
CdD21o0PElgcjteG/zym2Bb0Z6xz/id3VAMhqTDWILOAOgRf319bH+zcITMQjgoe
IXBW6EhhzTxxGDQhTWLDCbHfKkuH9sHoMWscuvopjulLgBjEwugLVQBMQUdJAlnG
ya6E1xQ8LjOiqDwE5YLLXrm6pkVm1g5M5+7oR443EUiFI9mpSDvAE9sSFldURlva
C3Z+8AbWREFNZiAV2dIVAgMBAAGjggM5MIIDNTAfBgNVHSMEGDAWgBRvHTVJEGwy
+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQU8iEa/GXeWHuANlkB/6+hQjeGdbswDgYD
VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcC
ARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYw
NKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNB
NC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQu
Y3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1o
dHRwOi8vR0VBTlQub2NzcC5zZWN0aWdvLmNvbTCCAX8GCisGAQQB1nkCBAIEggFv
BIIBawFpAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGEf/1v
DgAABAMARzBFAiAnAxjy7eTqdVWwO+3rhhbOmvMBN/rMdWU2FK5AJYXAUQIhANBo
R5DVg+H01YwWJ4pX2Aj8yksBhBIUqJ0c7jWOTCu4AHYAejKMVNi3LbYg6jjgUh7p
hBZwMhOFTTvSK8E6V6NS61IAAAGEf/1u3QAABAMARzBFAiEAnvKG+DLefVgePMIY
IYTWIXMIHfQCvo8eNPCFJPAo3VkCICOe/NPLx78S5u3QGfAA1fZggVnCRx0GXSrG
tldYK7+8AHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGEf/1u
qQAABAMASDBGAiEA/lOMolm6hq1CtN8+QlWhDLHvvqOx8bhdnQt5AThbDcQCIQDq
To2hmMoHPkMuUQxWNNo7NHUz2ZG6QyIoLshoiWoBXTAwBgNVHREEKTAnghFhc3Np
c3QudHVkZWxmdC5ubIISc3J2NDMyLnR1ZGVsZnQubmV0MA0GCSqGSIb3DQEBDAUA
A4ICAQAR9Vs5LY+/uBkZc55bReBlwXK/AYK4LSlm2BNcJr5QTYJxqo4IhIL7cC2Y
wlZ00wxjT73i+HmDHLrEOyWtx6g5OgjjOKENItTmiZDcSjlni4bg4/lAVjScr3iy
3RSaQ31fhKRlrjCmniQtpz8bUKNYV7AMASz21BsSZeAOQhWTXOq2W65Qh5uRA5XC
MRXdx7L8qzZb3h7UHV/kQ6AmzwBILCZXm+S6pT3MJfDxr+dCWsA8shGATGFXSYeh
NkM5Xwtd/NFhpMbkueIqXQGeI1LA/4hAODJkqJqaaHSl0nxZfZSRSQZY3YbyP8oi
hVLSY/qGwkECuOsjc5Ba/13F8sgn7bkFvUQ8JiIgdMMBRLUpRkhQ0NCGGwrMOvJw
EAHQzE2QEoOWvmbJuh8C/gf1z4wWpnSfYZ55NgUI6kEmYN9MfKH4YGSJULax3BOt
Ki1bSAKjwBupshg6mGB9VH23pZmLhSxzNhaJ2mwM1zEHUmb/VzN3YOcMWW47Nc20
FaGOum1lP2oG5dV4ZrG8PIIskWyUrwwBdpCZ8PHczG/BscACp4I2YHsBXKJPcvda
X9GBqMX9CDZkclh77s5INXTcoH90HqtYO8T5LvrjiJqATNCuSaKAPdJgIGRPPUdt
/RLHnh1A0WED/wfrQXBsUMcoiq+kq7l1tLA09pizsYICR4AAPg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37uXodyUsjTk6AOWGuvW
qN21DlcWvpC4iqhNoReJNQBoUYYEhW473QypJaVndNDJs/E9L0ftxx2ei21G5AZt
9kU2jmFvtLIDk13PdiHLTzuuFLbBIJaluXCD7WLbRgsj4AnQ9taNDxJYHI7Xhv88
ptgW9Gesc/4nd1QDIakw1iCzgDoEX99fWx/s3CEzEI4KHiFwVuhIYc08cRg0IU1i
wwmx3ypLh/bB6DFrHLr6KY7pS4AYxMLoC1UATEFHSQJZxsmuhNcUPC4zoqg8BOWC
y165uqZFZtYOTOfu6EeONxFIhSPZqUg7wBPbEhZXVEZb2gt2fvAG1kRBTWYgFdnS
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69232622008492498804913619656702786069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assist.tudelft.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28243647224965503766086717986376210000539391877739162514778778412708661709581123843802573854428575527545300591621239762666180828176998954977103425737077197247378480780765122603252011901282008788108551166606915866141815760859112530840015757622268620460268655880772950296238866684507661005873380615007370236656565807537863475169417123788860790080937927375261678891659625293560489899023908436165603844899241275303790552816807198318379466984604684138043417577880996530677988065169329160954830367092861794048081971980901637692497158921329234348712623279399901354911906995794031291856631311871349114125870226771557901521429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2211afc65de587b80365901ffafa142378675bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.tudelft.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv432.tudelft.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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