app.sh.se
- Södertörns högskola -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number aa:fa:72:43:a6:23:4e:55:9f:72:df:2c:58:20:d4:57 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Södertörns högskola
Organization:
Södertörns högskola
State / Province:
Stockholms län
Country: SE
Country: SE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): aa:fa:72:43:a6:23:4e:55:9f:72:df:2c:58:20:d4:57Serial Number (int): 227269151052468304004996967592047465559
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: e8:4e:a5:78:17:2d:35:0e:fd:d0:58:e0:e0:b3:fc:b3:30:2c:de:df
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 49:62:95:0a:c7:04:34:7f:1f:f1:a5:24:4e:bb:57:00:79:56:dc:4e
Fingerprint (sha256): 5a:87:8d:75:b0:33:ea:3c:fb:68:8f:a3:1f:5b:0c:22:70:26:30:f1:80:24:5e:cc:2d:a0:cb:dc:da:b4:ad:70
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate app.sh.se
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app.sh.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.sh.se
www.app.sh.se
www.app.sh.se
Other certificates including the domain name sh.se
(limited to 100 certificates)
www.sh.se
ssd04.web.sh.se
graduateland.com
webappl.web.sh.se
*.till.biblextern.sh.se
bibl.sh.se
usersync.errai.sh.se
earkiv.sh.se
graduateland.com
rad1.eduroam.sh.se
*.bibl.sh.se
api.bibl.sh.se
graduateland.com
careergate.sh.se
careerland.dk
careergate.sh.se
play.sh.se
graduateland.com
webappo.web.sh.se
dubhe.suni.se
support.mi.sh.se
primula.sh.se
graduateland.com
graduateland.com
graduateland.com
graduateland.com
mob01.web.sh.se
av.sh.se
spk03.web.sh.se
graduateland.com
*.bibl.sh.se
kvalitet.sh.se
ssd02.web.sh.se
career.cphbusiness.dk
graduateland.com
career.cphbusiness.dk
primula.sh.se
career.cphbusiness.dk
*.till.biblextern.sh.se
api.sh.se
blogg.sh.se
career.cphbusiness.dk
graduateland.com
terebellum.suni.se
www.sh.se
career.cphbusiness.dk
careerland.dk
graduateland.com
primula.sh.se
*.bibl.sh.se
blogg.sh.se
career.cphbusiness.dk
bibl.sh.se
api.sh.se
careerland.dk
dubhe.suni.se
primula.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
info.web.sh.se
apputv.sh.se
www.sh.se
itsl.bibl.sh.se
bibl.sh.se
api.sh.se
kronox-test.sh.se
student.web.sh.se
bibl-app.sh.se
*.till.biblextern.sh.se
graduateland.com
app.sh.se
rad2.eduroam.sh.se
careerland.dk
career.cphbusiness.dk
webappl.web.sh.se
apptest.sh.se
*.bibl.sh.se
www.sh.se
*.mi.sh.se
faktaassistenten.sh.se
faktaassistenten.sh.se
careergate.sh.se
www.sh.se
dubhe.suni.se
blogg.sh.se
itsl.bibl.sh.se
sim01.web.sh.se
apptest.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
www.sh.se
graduateland.com
blogg.sh.se
*.web.sh.se
www.sh.se
bibl.sh.se
bibl.sh.se
api.sh.se
faktaassistenten.sh.se
student.mi.sh.se
ssd04.web.sh.se
graduateland.com
webappl.web.sh.se
*.till.biblextern.sh.se
bibl.sh.se
usersync.errai.sh.se
earkiv.sh.se
graduateland.com
rad1.eduroam.sh.se
*.bibl.sh.se
api.bibl.sh.se
graduateland.com
careergate.sh.se
careerland.dk
careergate.sh.se
play.sh.se
graduateland.com
webappo.web.sh.se
dubhe.suni.se
support.mi.sh.se
primula.sh.se
graduateland.com
graduateland.com
graduateland.com
graduateland.com
mob01.web.sh.se
av.sh.se
spk03.web.sh.se
graduateland.com
*.bibl.sh.se
kvalitet.sh.se
ssd02.web.sh.se
career.cphbusiness.dk
graduateland.com
career.cphbusiness.dk
primula.sh.se
career.cphbusiness.dk
*.till.biblextern.sh.se
api.sh.se
blogg.sh.se
career.cphbusiness.dk
graduateland.com
terebellum.suni.se
www.sh.se
career.cphbusiness.dk
careerland.dk
graduateland.com
primula.sh.se
*.bibl.sh.se
blogg.sh.se
career.cphbusiness.dk
bibl.sh.se
api.sh.se
careerland.dk
dubhe.suni.se
primula.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
info.web.sh.se
apputv.sh.se
www.sh.se
itsl.bibl.sh.se
bibl.sh.se
api.sh.se
kronox-test.sh.se
student.web.sh.se
bibl-app.sh.se
*.till.biblextern.sh.se
graduateland.com
app.sh.se
rad2.eduroam.sh.se
careerland.dk
career.cphbusiness.dk
webappl.web.sh.se
apptest.sh.se
*.bibl.sh.se
www.sh.se
*.mi.sh.se
faktaassistenten.sh.se
faktaassistenten.sh.se
careergate.sh.se
www.sh.se
dubhe.suni.se
blogg.sh.se
itsl.bibl.sh.se
sim01.web.sh.se
apptest.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
www.sh.se
graduateland.com
blogg.sh.se
*.web.sh.se
www.sh.se
bibl.sh.se
bibl.sh.se
api.sh.se
faktaassistenten.sh.se
student.mi.sh.se
Certificate
The complete raw certificate details for app.sh.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHWTCCBUGgAwIBAgIRAKr6ckOmI05Vn3LfLFgg1FcwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDQyODAwMDAwMFoXDTI0MDQyNzIz NTk1OVowXDELMAkGA1UEBhMCU0UxGDAWBgNVBAgMD1N0b2NraG9sbXMgbMOkbjEf MB0GA1UECgwWU8O2ZGVydMO2cm5zIGjDtmdza29sYTESMBAGA1UEAxMJYXBwLnNo LnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxXQQF0LmbIBXxah l4io9nAlS8oeFEvX4Yub/KAJtscsiGtqH2veg9cjCGSQlGI9O1Z2eWmqe1d+5hUC Y3vCK9IBMnJPVkDDYNjY8Q6Ti9dn6m+AZzoq07QI+AAL1fb99qfwUaCGTogo0RJ6 6qgYQpTurPYjD5/yqrXkLWkXCWVQYUxC18S7CXONQueZSJ2KdGeYI6Bxrjg2SYTs CxHPoo2tqb6ttvyceIhwBEr4EeDdpjPX/BWI1k8D30NKXKqTp6VYG92wryu2Ps5c q0Seqsyzkzxo9MKYxZEgz5Wb9o1dPcS2nK30YBJp7MQd0XZWeGhSFaZwBOlhoiqV 9jwrbQIDAQABo4IDLDCCAygwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5x egwwHQYDVR0OBBYEFOhOpXgXLTUO/dBY4OCz/LMwLN7fMA4GA1UdDwEB/wQEAwIF oDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJ BgNVHSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8v c2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRw Oi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsG AQUFBwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdv LmNvbS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5U Lm9jc3Auc2VjdGlnby5jb20wIwYDVR0RBBwwGoIJYXBwLnNoLnNlgg13d3cuYXBw LnNoLnNlMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgB2/4g/Crb7lVHCYcz1 h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYfHLCb6AAAEAwBHMEUCIQDK3njXyff483DL KezZP/OVdIzLvAi7zP4NGS6x3rMMkAIgeqM0le3kYImjJ72G7SPQofzu4Z13TXce G99GoFurHtUAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYfH LCdVAAAEAwBIMEYCIQCbLzhS6wtiGLt75UjoloR70vSxIZ7DlcLjcKiA/XeOWwIh AKEEyuau82Tw+RakcUTKLQyZwvZgHC0/eQhFh78VD+g1AHYA7s3QZNXbGs7FXLed tM0TojKHRny87N7DUUhZRnEftZsAAAGHxywnNQAABAMARzBFAiEAtB7PfRp/q/d5 VgtfAsDj7ZJpKdRk9G9XtaYrJkwydkMCIE09RnSmzdH7412MrgOWZiSqCvnb/6AA +mttu2EEwhuYMA0GCSqGSIb3DQEBDAUAA4ICAQARG+iAkXs72KPMLhXlhRCJ54op Oik8XVEg+zcotrjkaP40JOOB8TQdu2sXk3heKQAAP4V1/dIX0AstglfvRW8BkprS NsWqeO2ZM+NbEp6M0iWqxndYlrJczpl69MAlkEGLHpgHFI6Vf0WaP/W39eEOJww+ j89VTwh88q19SfA2Yt3/FEnOQ7g4HQzr5hgz3nswwFI4rx0w8o3zHFnWAi4bw+0z meDLvGtPpPVLHDf2flgbcxK6CdWpIC8kxttcgKrLHTpvqQIwCzG3/X0PuKNbIH/3 1JWNN2E4nJu3d9yMNXsD5GZODfY9EF0XuwXVfrX24n6q8g/qK8p7++vUzayRpwV7 tNWDfnIt18TRMyVGyeGjy2DSmP5xB5QG48rgEJUq74VNR9YKvBGO8C7RliMNI2ZS nr23HX2jPGtQaIOIW47sEOoRgguE8N/cIrqR1TCWS/xW1TAYJdB3ho5CxGFjPugh A930E7srTACZWXJU+2IQ6vZo4l14CGuj1J3qpUM7fkPx+veGKcgAPiYd9DukNS9U 1sTaQlyIvFEg5tqa/a7gwl/HzggBY/vSmFxk749iqK6BCnZ4jo+I0ZjplHMksZpL kkaThE+HRa5pwV/pxCo2bzlwcZMnVOXhKOBQ8aKr3hi0e/mbAHPehVdCDoZHDS/C ThvrUnJoU+uO4E1TUw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxXQQF0LmbIBXxahl4io 9nAlS8oeFEvX4Yub/KAJtscsiGtqH2veg9cjCGSQlGI9O1Z2eWmqe1d+5hUCY3vC K9IBMnJPVkDDYNjY8Q6Ti9dn6m+AZzoq07QI+AAL1fb99qfwUaCGTogo0RJ66qgY QpTurPYjD5/yqrXkLWkXCWVQYUxC18S7CXONQueZSJ2KdGeYI6Bxrjg2SYTsCxHP oo2tqb6ttvyceIhwBEr4EeDdpjPX/BWI1k8D30NKXKqTp6VYG92wryu2Ps5cq0Se qsyzkzxo9MKYxZEgz5Wb9o1dPcS2nK30YBJp7MQd0XZWeGhSFaZwBOlhoiqV9jwr bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 227269151052468304004996967592047465559 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stockholms län' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Södertörns högskola' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.sh.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20082647118536039745892189415596177479654979477955153375542386095185018273143191830246493346405661018276257129382861128055337756807458611154199268082858004367474258996797097973623715314763799444196285145426159078761856579918671844200784617820497320634165919835970326781659623291403456074165787050080899282033487935593951163758018632484941915675807986291817084667205329408449563910654044397388822285632420708414008788640136243126251823699581618580369985576702795633735331142179572026300520239606158882921978581823793101591718460034067462082599009367860348632144264421239942158302320988903110485821930307061846837570413 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e84ea578172d350efdd058e0e0b3fcb3302cdedf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sh.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.sh.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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