www.ait.ie

- Athlone Institute of Technology -

Issued by GEANT eScience SSL CA 4

About this certificate

This digital certificate with serial number f5:98:e5:08:02:8b:48:cc:84:20:97:23:bc:76:ed:a9 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Athlone Institute of Technology

Organization: Athlone Institute of Technology
State / Province: Westmeath
Country: IE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): f5:98:e5:08:02:8b:48:cc:84:20:97:23:bc:76:ed:a9
Serial Number (int): 326454733396213573499223606915562401193
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b0:0a:e0:da:1b:17:91:21:eb:b7:ca:10:62:ca:8f:af:be:77:3d:42
AuthorityKeyId: 9a:2b:8a:22:d6:8d:0c:c0:2a:a5:6f:64:33:3f:96:60:67:15:1d:b2

Fingerprint (sha1): 18:ee:6d:05:fa:f3:99:f8:d9:ac:50:19:b7:ec:50:d2:de:30:9e:bd
Fingerprint (sha256): a2:51:f7:67:b0:b1:0d:09:57:ab:0f:10:bf:7f:65:77:e9:17:cb:b4:d4:92:1e:57:f6:3d:26:91:35:b0:12:3e

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl

Check the revocation status for certificate www.ait.ie

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ait.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ait.ie
ait.ie

Other certificates including the domain name ait.ie

(limited to 100 certificates)
www.mri.ait.ie
mail.ait.ie
collaboration.ait.ie
modmgrtest.ait.ie
sip.ait.ie
elearning.ait.ie
mail.ait.ie
inplace.ait.ie
autodiscover.ait.ie
*.elearning.ait.ie
libmain.ait.ie
mail.ait.ie

timetable.ait.ie
inplacedev.ait.ie
cpd.ait.ie
library.ait.ie
elearning2014.ait.ie
edocs.ait.ie
elearning.ait.ie
forti.ait.ie
libsearch.ait.ie
eduroam.ait.ie
elearning.ait.ie
www.ait.ie
owa.ait.ie
modmgr.ait.ie
aitstage.ait.ie
idp.ait.ie
apps.ait.ie
vlablive.ait.ie
elearning2015.ait.ie
mail.ait.ie
www.bri.ait.ie
ammt.ait.ie
ait.ie
aitmoodle.ait.ie
adfs.ait.ie
timetable.ait.ie
sri.ait.ie
stu-projects.ait.ie
timetable.ait.ie
elearning.ait.ie
libmain.ait.ie
amm.ait.ie
aitcard.ait.ie
libmain.ait.ie
apps.ait.ie
forti.ait.ie
vlab.ait.ie
onlineexams.ait.ie
mail.ait.ie
extranet.ait.ie
*.ezproxy.ait.ie
AN CHEIM COMPUTER SERVICES
aitmoodle.ait.ie
careers.ait.ie
weblive.ait.ie
tus.ie
elearningm2.ait.ie
libmain.ait.ie
weblive.ait.ie
aitv-bol-f1.staffnet.ait.ie
jobfair.lu
vlab.ait.ie

jobfair.lu
moodlenew.ait.ie
elearning.ait.ie
www.ait.ie
fs.ait.ie
mail.ait.ie
*.ait.ie
fortianalyzer.ait.ie
idp.ait.ie
aitmoodle2019.ait.ie
aitcard.ait.ie
www.ait.ie
vlablive.ait.ie
2019.elearning.ait.ie
www.ait.ie
2019.elearning.ait.ie
www.ait.ie
www.ait.ie
AN CHEIM COMPUTER SERVICES
careers.ait.ie
aitcard.ait.ie
AITP-EDUROAM-A2.ait.ie
fs.ait.ie
jobfair.lu
modmgr.ait.ie
helpdesk.ait.ie
idp.ait.ie
aitcard.ait.ie
2019.elearning.ait.ie
tus.ie
idp.ait.ie
fs.ait.ie
helpdesk.ait.ie
elearning.ait.ie

Certificate

The complete raw certificate details for www.ait.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH2TCCBcGgAwIBAgIRAPWY5QgCi0jMhCCXI7x27akwDQYJKoZIhvcNAQEMBQAw
SjELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxIDAeBgNV
BAMTF0dFQU5UIGVTY2llbmNlIFNTTCBDQSA0MB4XDTIzMDIyMDAwMDAwMFoXDTI0
MDMxNjIzNTk1OVowgaIxEzARBgoJkiaJk/IsZAEZFgNvcmcxFjAUBgoJkiaJk/Is
ZAEZFgZ0ZXJlbmExEzARBgoJkiaJk/IsZAEZFgN0Y3MxCzAJBgNVBAYTAklFMRIw
EAYDVQQIEwlXZXN0bWVhdGgxKDAmBgNVBAoTH0F0aGxvbmUgSW5zdGl0dXRlIG9m
IFRlY2hub2xvZ3kxEzARBgNVBAMTCnd3dy5haXQuaWUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDd2NMikglXSJWbHdXLTyxru2rfkQ5wxS9WFc/D6v9U
AiJAwRqMsmnct3O0Yr5vcy5BfH/eup0zOaMHSAKlbGY4TrOeRPbGYz/IcR+Ab4fn
e4Pa9/0e/L7DbxkXUwySngK2FFOtXjyOkBfJ6mauo8KyGHXgiiMyxR+U8Nwgc7wV
9YrbYc8jzyPT5I8LdG8wTymSImS5ApdOoJMPfGBGFFerac2SD7/HSGrg9dA4pl9p
OP5gwLj8sT9AIMy/JdjLhY2/EIluTAmTR3Q5HUxOJ1NoYKGweDM+XpqMogTpVyA/
ZTzlJS/RH7BcvQWdA2/hgrQajZlARxD/ejAAnfangny7AgMBAAGjggNfMIIDWzAf
BgNVHSMEGDAWgBSaK4oi1o0MwCqlb2QzP5ZgZxUdsjAdBgNVHQ4EFgQUsArg2hsX
kSHrt8oQYsqPr753PUIwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdIARuMGwwDAYKKoZIhvdM
BQICATANBgsqhkiG90wFAgMDAjANBgsqhkiG90wFAgMBAjA0BgsrBgEEAbIxAQIC
TzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwB
AgIwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNv
bS9HRUFOVGVTY2llbmNlU1NMQ0E0LmNybDB7BggrBgEFBQcBAQRvMG0wQAYIKwYB
BQUHMAKGNGh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRlU2NpZW5j
ZVNTTENBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3Rp
Z28uY29tMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgB2/4g/Crb7lVHCYcz1
h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYZwVaGDAAAEAwBHMEUCIFixNZhEm65tvI9/
XAydxENufwhAW2cAWAnY05zpakQrAiEA4UbxEdMAHlKJrrAfrsLXw28X+yYofyw4
NoYoAZRXkDEAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYZw
VaFiAAAEAwBIMEYCIQCjC9AXWZSSa37v21TlSIFju2uc2XUWU3pH5dCGQD8tnQIh
AOKn+HzQ9ZidUi9h1DBq4g5fkk8OA8N7xEE73pvNldarAHcA7s3QZNXbGs7FXLed
tM0TojKHRny87N7DUUhZRnEftZsAAAGGcFWhHAAABAMASDBGAiEA7/yyTUTgZJkF
IOIqt6IZ25u9Ed/KLa3sZ1PWZg3ZlCcCIQDxssKgpoSzP0Z3exjPJCYAg0lS+UOp
nk2UMz7lVdgDxTAdBgNVHREEFjAUggp3d3cuYWl0LmllggZhaXQuaWUwDQYJKoZI
hvcNAQEMBQADggIBAIPu97xEdl7Qxc22pY1uyjoXMJihZkTugl2oyp3a3mcfD5AO
JY0KZDBwO8NfN4hhS6JmrgTvT27cCkFDSYaSI8I5hq62VSvjSH8Z6jYeLpZUEmAx
EpTd/GvkO/9Yk+FXROMrgCE9tXy/2248KlliMANZEFBIejr9qpixSNNRs7jtwIRB
oB1PO8ouFGyhcAbKBTUygjGMtBqeEbzEPVvo1L8UGWJ9xdd0h8Bon1AJZx6/Gigh
xfjzO0aeohOIEKrVnQIWayBcbeuGbxTGhgwT+U9735Vc8c3+E0IR3J70/Jk8FOGL
DIp4gJyIWnk5TUEsumjk8+Z5J+FWn4Uvhlj96ZAdwP6gw0eF60z2uRUA7fJ5Nspi
5SpPjG6St++O1Bm1fwvR14Z4ljV3L3v28dpKkHc9TpdWauFBV9/5avUICDOSLVMN
AcYJ8byZvBJ+t0poebKDY1NdP6+S9Uu7JCApdons/zhtv+uyBjIOvnykSxBHYDKM
nZd7JRuoOvW2a2GtiYrsGFBnHjmAJlOppJK48uxY5mR+msYwCyhB9znV3U/4CPQ7
PsApMHP2hscF/Jo0AlREtN0FsEmk1vpeoCTjjzQ8Mlmb963XsgvuY3jfUoq8VSI3
vY/edGDVp9Oz8fUiLC89jJkyAIC6bI/tQu83AFvv8b6b2GchX3dcPtJ4WkGc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3djTIpIJV0iVmx3Vy08s
a7tq35EOcMUvVhXPw+r/VAIiQMEajLJp3LdztGK+b3MuQXx/3rqdMzmjB0gCpWxm
OE6znkT2xmM/yHEfgG+H53uD2vf9Hvy+w28ZF1MMkp4CthRTrV48jpAXyepmrqPC
shh14IojMsUflPDcIHO8FfWK22HPI88j0+SPC3RvME8pkiJkuQKXTqCTD3xgRhRX
q2nNkg+/x0hq4PXQOKZfaTj+YMC4/LE/QCDMvyXYy4WNvxCJbkwJk0d0OR1MTidT
aGChsHgzPl6ajKIE6VcgP2U85SUv0R+wXL0FnQNv4YK0Go2ZQEcQ/3owAJ32p4J8
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326454733396213573499223606915562401193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT eScience SSL CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'terena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'tcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Westmeath'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Athlone Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ait.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28005585664849385126415380314259552204676396593286311367802918477621301185572564195179691945327163731539893663519185458113128217003040203221629335041408672257242641368507010281033002772668572208116796565029325804496584116337052191627490633719229556536713622994523778377057260740991910308683585778737140979996865507055205160327415723062720821516251321364703658021145729502726678356165262386686701833542600812294341637404405610462324986319055820704844578804896061178290770906470862110006759969475841739057533814349982448563813194988686686090484886927580999931236294317754169814968273506930204729656564892419809037417659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9a2b8a22d68d0cc02aa56f64333f966067151db2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b00ae0da1b179121ebb7ca1062ca8fafbe773d42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ait.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ait.ie'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0083eef7bc44765ed0c5cdb6a58d6eca3a173098a16644ee825da8ca9ddade671f0f900e258d0a6430703bc35f3788614ba266ae04ef4f6edc0a414349869223c23986aeb6552be3487f19ea361e2e96541260311294ddfc6be43bff5893e15744e32b80213db57cbfdb6e3c2a59623003591050487a3afdaa98b148d351b3b8edc08441a01d4f3bca2e146ca17006ca05353282318cb41a9e11bcc43d5be8d4bf1419627dc5d77487c0689f5009671ebf1a2821c5f8f33b469ea2138810aad59d02166b205c6deb866f14c6860c13f94f7bdf955cf1cdfe134211dc9ef4fc993c14e18b0c8a78809c885a79394d412cba68e4f3e67927e1569f852f8658fde9901dc0fea0c34785eb4cf6b91500edf27936ca62e52a4f8c6e92b7ef8ed419b57f0bd1d786789635772f7bf6f1da4a90773d4e97566ae14157dff96af5080833922d530d01c609f1bc99bc127eb74a6879b28363535d3faf92f54bbb2420297689ecff386dbfebb206320ebe7ca44b104760328c9d977b251ba83af5b66b61ad898aec1850671e39802653a9a492b8f2ec58e6647e9ac6300b2841f739d5dd4ff808f43b3ec0293073f686c705fc9a34025444b4dd05b049a4d6fa5ea024e38f343c32599bf7add7b20bee6378df528abc552237bd8fde7460d5a7d3b3f1f5222c2f3d8c99320080ba6c8fed42ef37005beff1be9bd867215f775c3ed2785a419c