ubdpc-acc-web2.forux.nl

- Universiteit van Amsterdam -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 8d:10:83:48:b8:19:8b:32:27:d1:87:f6:e6:9d:e5:04 was issued on by GEANT Vereniging.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit van Amsterdam

Organization: Universiteit van Amsterdam
State / Province: Noord-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 8d:10:83:48:b8:19:8b:32:27:d1:87:f6:e6:9d:e5:04
Serial Number (int): 187506886912471597004116532138881180932
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ae:60:ae:1b:31:9c:d4:c2:3c:a8:98:99:e0:26:fa:07:bd:b8:71:b5
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): ad:e0:98:e9:ce:01:a2:f7:5c:6c:bc:48:8d:5a:d6:f5:40:ec:5c:0e
Fingerprint (sha256): 42:65:ff:ff:43:e0:d4:92:d7:97:72:0f:0a:37:3b:8a:a1:f4:b4:47:d1:d1:04:5d:5f:43:bb:40:30:04:9e:13

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ubdpc-acc-web2.forux.nl

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ubdpc-acc-web2.forux.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ubdpc-acc-web2.forux.nl
test0.dpc.uba.uva.nl
test1.dpc.uba.uva.nl
test10.dpc.uba.uva.nl
test11.dpc.uba.uva.nl
test12.dpc.uba.uva.nl
test13.dpc.uba.uva.nl
test14.dpc.uba.uva.nl
test15.dpc.uba.uva.nl
test16.dpc.uba.uva.nl
test17.dpc.uba.uva.nl
test18.dpc.uba.uva.nl
test19.dpc.uba.uva.nl
test2.dpc.uba.uva.nl
test20.dpc.uba.uva.nl
test3.dpc.uba.uva.nl
test4.dpc.uba.uva.nl
test5.dpc.uba.uva.nl
test6.dpc.uba.uva.nl
test7.dpc.uba.uva.nl
test8.dpc.uba.uva.nl
test9.dpc.uba.uva.nl

Other certificates including the domain name forux.nl

(limited to 100 certificates)
sap-dev-rudx.ic.uva.nl
psql-prd1.forux.nl
sap-acc-ruax.ic.uva.nl
content-dev.sap.uva.nl
canvas-acc-apps2.forux.nl
gitlab-dev.forux.nl
moodle-prd-db1.forux.nl
unixbeheer.forux.nl
sap-prd-bupx.forux.nl
hva.nl
admin.uva.icts-dev-app1.aws.forux.nl
maven.ic.uva.nl
netbox.forux.nl
diensten.uba.uva.nl
moodle-prd-db1.forux.nl
canvas-acc-apps2.forux.nl
sap-prd-ffpx.forux.nl
aanmelden.hva.nl
netdisco-acc1.forux.nl
hva.nl
uvacms-tst-ic1.forux.nl
expenseclaims.uva.nl
airm-acc.forux.nl
psql-prd1.forux.nl
admin.hva.icts-dev-app1.aws.forux.nl
gitlab-dev.forux.nl
ipam-dev1.forux.nl
tsm.uva.nl
lamp-prd-dba1.forux.nl
uvacms-tst-fe1.forux.nl
uvacms-tst-ic1.forux.nl
tst-aanmelden.hva.nl
api.ocp-tst1.ocp2.forux.nl
api.expenseclaims.uva.nl
ocpidp-acc.lb.forux.nl
content.sap.uva.nl
ocpidp-prd.lb.forux.nl
content-acc.sap.uva.nl
web-prd-wordpress1.forux.nl
expenseclaims-acc.uva.nl
loadbalancer.icts-dev-app1.aws.forux.nl
hva.nl
tower.forux.nl
jira.ic.uva.nl
cas-acc4.forux.nl
api.ocp-prd1.ocp1.forux.nl
builder.ic.uva.nl
airm-acc.forux.nl
nra.sis.uva.nl
admin.uva.icts-dev-app1.aws.forux.nl
monitor.forux.nl
moodle-dev.fdmci.hva.nl
unixbeheer.forux.nl
tower-dev.forux.nl
m.sis.uva.nl
uvacms-tst-be1.forux.nl
uvacms-tst-fe1.forux.nl
sap-dev-budx.ic.uva.nl
integration-test.cms.uva.nl
content.sap.uva.nl
psql-prd1.forux.nl
hva.nl
cmx-prd-anonymizer1.forux.nl
content.sap.uva.nl
vault.forux.nl
canvas-tst-apps1.forux.nl
uvacms-tst-ic1.forux.nl
sap-dev-ffdx.forux.nl
tsm-dev.ic.uva.nl
kassa.hva.icts-dev-app1.aws.forux.nl
kassa.uva.icts-dev-app1.aws.forux.nl
ldap-dev.ic.uva.nl
tlscertmon-dev.forux.nl
a10-devx.forux.nl
psql-dev1.forux.nl
monitor.forux.nl
nessus-prd1.forux.nl
uvacms-prd-ic1.forux.nl
hvacms-acc-fe1.forux.nl
moodle-prd-db1.forux.nl
uvacms-acc-fe1.forux.nl
test.uba.uva.nl
oim-prd-fe1.forux.nl
gitlab-dev.forux.nl
moodle-prd-db1.forux.nl
ipam.forux.nl
lamp-prd-dba1.forux.nl
hvacms-acc-ic1.forux.nl
smtp-acc3.forux.nl
sap-prd-rupx.ic.uva.nl
netdisco-acc1.forux.nl
hvacms-acc-ic1.forux.nl
loadbalancer.icts-dev-app1.aws.forux.nl
canvas-acc-apps1.forux.nl
labservant.ic.uva.nl
sap-tst-ruzx.forux.nl
sap-prd-bupx.forux.nl
ubbis-prd-web1.forux.nl
hvacms-acc-be1.forux.nl
ubdpc-acc-web2.forux.nl

Certificate

The complete raw certificate details for ubdpc-acc-web2.forux.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNYZMIO7cHbVFVkqbkN5
Ymncisw/ZGoT+LFnCtAWANI+Wkm5v3c8T76cHi+q9QbGE+ze2e7vrMrTAveFjt2S
M+YsDwn362Xda/NS1GyJN7RBWfP0fOZavBbS/87KnYgbEiYAJitsJoE4kEqGX4WN
64TmD62jV0DJxEBokbhkz2/8Or8QoVQMdwnUnc3mvdPFqDNY52L7WyFlYbws2EUF
tQATHXMzFfOtHm68KzRIwL4AIj5/egNKPa8HB5vVXLxDpLUfRED2ugfw5g1yJ5cV
2r63af10xWe5wYRKLnUSQpTNum14cpzu7pRNbDjZVQXhv/RYJ0sCXDij9pBwcGsJ
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 187506886912471597004116532138881180932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ubdpc-acc-web2.forux.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21313611088489669447458829082148666180749381202648881408511869381136893071379372281145241451962897343298674014302499272870991002309982230237550251105866255334537044089921589492494378988033679960903608147810500383768011845094312741359699593875586282489794059987115459496240987341188069314406077832529329548428926128419177761395546624838737909567726691874898981016337283699345993561975498741619508285594500945370672317326051827043797170333380564029720710801343189882591497667102846778910410704191853373296753516865315180977648592818465212670521884286434275823844739739109507377450909609555726696844305005434686843586859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae60ae1b319cd4c23ca89899e026fa07bdb871b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (502 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubdpc-acc-web2.forux.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test0.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test10.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test11.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test12.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test13.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test14.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test15.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test16.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test17.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test18.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test19.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test20.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test5.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test6.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test7.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test8.dpc.uba.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test9.dpc.uba.uva.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00110ab2a869bceadb1f54f21a3cdd473055f5449e4883a4f8f038d1365768c33abb735e9c569b1177607233ce3562b074b7a331304d9dc2db4c9bad2edd9a9265b7a8098c7cf2f1e79010043f6433b67ccd5fd677bc50dc1476d11168009b4e65d0206d453bcfd90cb9ae132dc474589fe094d033bf8638216f7cb85d62af1fd2c20d28f0d65e5241131e6e9fbf4b31ee2a9c67368ecb6f0166b4ae1207aa158a4e373deaeb3309565cfbaa7ea77cbd41e45e0b4630a87f9e4f1139bc95f6c156f497f3fd4d28028dac294f6559d24f0d91d5dc031fccbb0a08ca651ab6ea5f1a4aa2c30ed32e56f2d6627818cbd4c7314a1b5adc4bd15531155472439f4b0b939d337983fa551e24e791d5e018432b8eadf4f9a7a3af3fdcbd0750146c8b85fd79991716a61579e4745431eb6a4ed75e7c4c8fb6584656509173b38061ddc857bfb58955f5e50a5a634c76a0a210da6f3473ed90a291b40395b3004ee6cfa5faa8eee6ec8440fe4561500a657f6236c8f8875b86e09b92ad1a4f1dcfdc981792a75a33388110389681f1d74123a7dec1883ba3a35c5b667eb8660e0c67988d693a256b68fc5f5ebf5081b69ddc63c0bf3c9eb9f4aa865f5a20a9cac5719a5e1db382a540740f1de3a56f30d13b6ce0951236db91f4da2ccf9f3d0c09f5cf51a8b1ed418021492119f3acad1634f8e070d9ad845dcd7f97c8d0f3ce0229786e25