netauth-prd2.net.uha.nl

- Universiteit van Amsterdam -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 08:1f:56:ec:80:11:32:00:ca:02:e6:67:a9:bf:28:ad was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit van Amsterdam

Organization: Universiteit van Amsterdam
State / Province: Noord-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:1f:56:ec:80:11:32:00:ca:02:e6:67:a9:bf:28:ad
Serial Number (int): 10796548193601043178701244661952882861
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:31:9d:35:e9:05:8c:be:c8:60:d9:cc:f5:1f:a1:18:ad:0a:5c:16
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b1:f7:b2:30:8b:ef:fe:cd:69:4e:6d:a6:8f:8f:f9:47:cc:61:09:e2
Fingerprint (sha256): 70:d2:a3:9f:d6:bd:bd:22:34:bb:c6:e8:35:4b:98:63:da:4c:c7:32:9f:19:e0:ef:b9:da:b7:a2:1a:88:c3:af

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate netauth-prd2.net.uha.nl

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netauth-prd2.net.uha.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netauth-prd2.net.uha.nl
netauth-prd2.net.hva.nl
netauth-prd2.net.uva.nl

Other certificates including the domain name uha.nl

(limited to 100 certificates)
radius-acc-authus1.net.uha.nl
vpn-acc-dc-01.net.uha.nl
ex2016-prd-hva.lb.uva.nl
beheervpn-prd.net.uha.nl
ex2016-acc-hva.lb.uha.nl
ex2016-prd-uva.lb.uva.nl
hva.nl
netauth-prd1.net.uha.nl
infoblox.net.uha.nl
authus-acc.net.uha.nl
vpn-dc-01.net.uha.nl
ex2016-acc-uva.lb.uha.nl
netdisco-acc1.forux.nl
radius-prd-authus1.net.uha.nl
netauth-prd.lb.uha.nl
netauth-prd1.net.uha.nl
netauth-prd.lb.uha.nl
fortimanager.net.uha.nl
lb-dc-1.net.uva.nl
ex2016-prd-hva.lb.uha.nl
lb-dc-1.net.uva.nl
fw-gbs-01.net.uha.nl
ex2016-prd-uva.lb.uva.nl
ex2016-prd-hva.lb.uva.nl
iris.ic.uva.nl
oim-prd-be.lb.uha.nl
ex2016-prd-hva.lb.uha.nl
netauth-prd2.net.uha.nl
smtp-prd.lb.uha.nl
authus-prd.net.uha.nl
netauth-prd2.net.uha.nl
ex2016-acc-hva.lb.uha.nl
radius-prd-authus1.net.uha.nl
radius-acc-authus2.net.uha.nl
fortimanager.net.uha.nl
oim-acc-be.lb.uha.nl
smtp-prd3.forux.nl
smtp-prd.lb.uha.nl
hva.nl
radius-prd-authus2.net.uha.nl
netauth-prd1.net.uha.nl
radius-acc-authus2.net.uha.nl
ex2016-prd-uva.lb.uva.nl
authus-dev.net.uha.nl
smtp-prd3.forux.nl
authus-acc.net.uha.nl
authus-prd.net.uha.nl
radius-prd-authus2.net.uha.nl
lb-dc-1.net.uva.nl
nf-store.ic.uva.nl
ex2016-prd-uva.lb.uva.nl
radius-acc-authus1.net.uha.nl
netauth-prd1.net.uha.nl
fortianalyzer.net.uha.nl
netauth-prd.lb.uha.nl
hiab-prd1.mgmt.uha.nl

Certificate

The complete raw certificate details for netauth-prd2.net.uha.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIImDCCBoCgAwIBAgIQCB9W7IARMgDKAuZnqb8orTANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwODAyMDAwMDAwWhcNMjMwNzA2MjM1
OTU5WjBsMQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDEjMCEG
A1UEChMaVW5pdmVyc2l0ZWl0IHZhbiBBbXN0ZXJkYW0xIDAeBgNVBAMTF25ldGF1
dGgtcHJkMi5uZXQudWhhLm5sMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAxPSTtmFdvC5pV///fHM4x6ZF4Upqmy+1NLU2UJ55IntaZpcrpg+oJowlaOk2
sTWOSHPUo9nd8AY5MjWTe58Yvpp2Syz1SUrgU7MblUPxIjp6KTRpfqDaV3TI/DXe
S0exqvUu/4+1piSTONoUF7GxsJg2Q6ebXQn7ZSq6XCDGe+/ZWUtKDVnJ+fugUUcp
RM3OLbEWZtGDqdH2WgF+HYoPYlFy+wXXYqOobq1g5/nKyY0FvzPR/w8AKtskJ52a
g9GqUovIS+34oAuVM9niujZOcyeXyHYBquTvd7e0MosnUOUX9muWNGuQgtppeNuh
FRgNZdFQtTm9A3ZiHCnCRCONxgWskBGIHZsMwtt9rdljBv6CR2LFcD+7v4+A7E2e
yilWwyB9994somxI/KI8cjcje77Kjfs+XJMmFrpmVGeOdQeooTywk0DDnflHP5te
//XniihBTTAz6dT5tCyF1FxE3uHXEltzoAps6+ERQeBy6qaqabLbEqFILur7Zwwa
pTb9CFbtJmIY21dWwb4akz5KqOUjdj61lFqp+HcMhHNCLt15kPraQWHZTXIaFc6t
Uc20/wEAIyhjPUOq4M00iugO6dybYJvCGZKHcUmNYLo2K+ctumNTFDJq/rKGG7iA
V1R1ZjWmCzl4hp2nXkoaVJHmTe7o9R/xztudG5Ag92rRKJMCAwEAAaOCA1wwggNY
MB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBR+MZ01
6QWMvshg2cz1H6EYrQpcFjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEE
AbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAI
BgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0
aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYB
BQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNB
NC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29t
MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCt9776fP8QyIudPZwePhhqtGcp
Xc+xDCTKhYY069yCigAAAYJeHbioAAAEAwBHMEUCIHC1fyMY8BtvQysAUOPUQ+aK
rx3zppK1+ZWoEpEHDfF0AiEA3LAFQ8V4h8AJY1VTpm2W+/Uni8ZG6dS5cUUO7YKd
8c0AdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYJeHbi1AAAE
AwBIMEYCIQD8GaC1T/yrob0DdbkOnNW50HTE/jKwIulfftyokA+o7QIhAOCVULgV
iVJdqkBTRFhwjSpuHdai+YLOsuMpaHdfjUbEAHUA6D7Q2j71BjUy51covIlryQPT
y9ERa+zraeF3fW0GvW4AAAGCXh24iQAABAMARjBEAiAR6dCe699SIo9IRINIpNz8
X3ng1RkylqVTtqio0BXU1QIgItzDtPfU1o9+ncjFVkz/SLfywcznJ+7JI3QCLFwC
EUkwVAYDVR0RBE0wS4IXbmV0YXV0aC1wcmQyLm5ldC51aGEubmyCF25ldGF1dGgt
cHJkMi5uZXQuaHZhLm5sghduZXRhdXRoLXByZDIubmV0LnV2YS5ubDANBgkqhkiG
9w0BAQwFAAOCAgEADkI2dLyVpI4QorGPA+j7ZlJjGKOScrNhcjiEtP1hcOMeNBjA
MrBq2FCocl7W02YAoqkfyik0wm1c3VHxUIxNvMH1thMIIpCMRz+fr83pxMr6WLid
TwQ0/H5ZYHi0/hk0/ekZ3apLE5SsYgBtiLk0gOwQlqf0DjeVvVE0krQmtjzwkaOF
EKi1ZZQ2MlP1vh68e201dR+wWXpiBIe8VZ7W0+FZo/r9DPMxviROIsUjygpfDI+Y
6oF2tJmDUmsxVg0nMw4H4WZnze+lnpq9cnnZezIyxElcwhHCDUbWjnCrRaNB5suw
vnVxHuq/kRRR3h91uN4oGo5RwKMF2j4JswJnHhAg49BnMFDKpbWc4xYzjm0dw/yW
S2RikcE5HW3DhHhSmvZJvxKiDK0shLIRETv13fvKrsbrN653/8QjveZJ1856rLdc
b2mPDCZRChN0pIOIl4XDn917wgDwRCqI4Lj3+tuk0TQ74hcJbrn9V6AZgdMekEXt
MBLx6sm1p++d/fzQRrzPqvK4IT98/Ab8LeE1cGKeefR1nPsqYCMCwfemWRAho6dd
7b8f362bktEhFkMFASyz/C/7WIYAElztKYv1YM2p4sUr5qA+HDldUNRqCBw0KKCf
N7DP3bv1YDExeJYZP6/H0F+88ptK8q1YA6s6N21gxH5BaEc4eYoZhJbYt5A=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10796548193601043178701244661952882861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netauth-prd2.net.uha.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803507843245882990388701684118189707956620012047186278789946374853158244539735587384413667920056580827705050037216289140582258876730656056887638630734400571751697064151629197145855393866928945216283562909705617760197257081326798568657540966885422567999172556716232738038526134126415832405103932797238346714906758174257146064261513637848961766491192046873748143029908229815296650988837059261059769583309856846618892204167663673519402829135792724616257699226745394828511126771294949580634295459448221542609079781633330193077922782274861813247803211044527275503333595564486451971414581067880921471672970258093164218444913235460177501126647473101590850928756700361107213311482862185861699847464979799741877556008147657388405707232701811551681039172920434176169629903948096806467984749409006801379780268727270307733449797720379616850648338173738814032923128696986813172599380145306762092023996901367315525585916174620339951558347993958010053505215438467141251176573101862321535712889774672309993781866170395199335452261365286713614833230372354927285386647034189653971728071858151592454968156199046034211863349092243897361194955046638493922940108286406886408956681980300806525072892033247252098678687734693969642052234586486831570844985491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e319d35e9058cbec860d9ccf51fa118ad0a5c16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001825e1db8a80000040300473045022070b57f2318f01b6f432b0050e3d443e68aaf1df3a692b5f995a81291070df174022100dcb00543c57887c009635553a66d96fbf5278bc646e9d4b971450eed829df1cd0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001825e1db8b50000040300483046022100fc19a0b54ffcaba1bd0375b90e9cd5b9d074c4fe32b022e95f7edca8900fa8ed022100e09550b81589525daa40534458708d2a6e1dd6a2f982ceb2e32968775f8d46c4007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001825e1db8890000040300463044022011e9d09eebdf52228f48448348a4dcfc5f79e0d5193296a553b6a8a8d015d4d5022022dcc3b4f7d4d68f7e9dc8c5564cff48b7f2c1cce727eec92374022c5c021149
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netauth-prd2.net.uha.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netauth-prd2.net.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netauth-prd2.net.uva.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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