sin-service-agglomerate2.service.eur.nl

- Erasmus Universiteit Rotterdam -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0b:67:45:2b:c3:5d:11:c9:33:3d:bf:db:ce:20:e8:49 was issued on by TERENA.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Erasmus Universiteit Rotterdam

Organization: Erasmus Universiteit Rotterdam
Locality: Rotterdam
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:67:45:2b:c3:5d:11:c9:33:3d:bf:db:ce:20:e8:49
Serial Number (int): 15157717483598892934410822402181228617
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:e2:29:69:06:52:5b:68:cf:88:6f:d4:d6:2e:7e:e6:c0:4c:e9:75
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 7b:c9:31:27:de:a4:be:e2:94:4d:be:92:ef:94:1f:10:06:15:f2:83
Fingerprint (sha256): a6:db:c5:f4:ab:b6:ce:16:7f:f0:2a:a7:40:86:9d:7e:ab:63:6b:78:40:f9:ea:59:89:1e:c4:2c:78:15:e1:5e

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate sin-service-agglomerate2.service.eur.nl

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sin-service-agglomerate2.service.eur.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sin-service-agglomerate2.service.eur.nl
att.sin-online.nl
auth.sin-online.nl
bmg.sin-online.nl
bsk.sin-online.nl
bsks.sin-online.nl
bskweb.nl
clean.bskweb.nl
clean.collegeweb.eur.nl
clean.eduweb.nl
clean.exchangeprogramme.nl
clean.exchangeprogram.nl
clean.gmdweb.nl
clean.lawweb.nl
clean.psyweb.nl
clean.socweb.nl
collegeweb.eur.nl
cookie.frg.eur.nl
eduweb.nl
emc.sin-online.nl
ep.sin-online.nl
erasmusmc.sin-online.nl
ese.sin-online.nl
eshcc.sin-online.nl
eshpm.sin-online.nl
esl.sin-online.nl
esls.sin-online.nl
essb.sin-online.nl
essbs.sin-online.nl
euc.sin-online.nl
eucs.sin-online.nl
eur.sin-online.nl
exchangeprogramme.nl
exchangeprogram.nl
few.sin-online.nl
foldersave.sin-online.nl
folders.sin-online.nl
frg.sin-online.nl
fsw.sin-online.nl
fsws.sin-online.nl
fwb.sin-online.nl
gmdweb.nl
iss.sin-online.nl
lawweb.nl
media.sin-online.nl
papersave.sin-online.nl
papers.sin-online.nl
photos.sin-online.nl
psw.sin-online.nl
psy.sin-online.nl
psyweb.nl
pw.sin-online.nl
pws.sin-online.nl
rsm.sin-online.nl
services.sin-online.nl
sin-online.nl
soc.sin-online.nl
socs.sin-online.nl
socweb.nl
thumb.sin-online.nl
uploads.sin-online.nl
video.sin-online.nl
www.bskweb.nl
www.collegeweb.eur.nl
www.eduweb.nl
www.exchangeprogramme.nl
www.exchangeprogram.nl
www.gmdweb.nl
www.lawweb.nl
www.psyweb.nl
www.sin-online.nl
www.socweb.nl

Other certificates including the domain name eur.nl

(limited to 100 certificates)
h5p.eur.nl
dialogicplatform.com
db-bundle.sin-online.nl
www.erim.eur.nl
masterhealtheconomics.eur.nl
dialogicplatform.com
monitor.mgt.eur.nl
topdesk.eur.nl
psp.eur.nl
feb21011.ese.eur.nl
superoffice.holding.eur.nl
gallery.erim.eur.nl
login-accept.ds.eur.nl
pma.eur.nl
Bizzdesing.eur.nl
www1.eur.nl
alumni.eur.nl
sin-online-service-bundle.service.eur.nl
bko.eur.nl
asklepios.eur.nl
mybeta.eur.nl
overleg.eur.nl
people.few.eur.nl
ess.eur.nl
www.horafinita-accept.eur.nl
ess-test.eur.nl
timetables.eur.nl
thetheorymarket.eur.nl
mis-api-test.erim.eur.nl
hawk.eur.nl
rdbroker20-test.eur.nl
ns1.bvdu.eur.nl
ebs.eur.nl
resourcebooker.eur.nl
masterinternationalandeuropeanpubliclaw.eur.nl
www.webshop.eur.nl
trackeur-bundle.api.eur.nl
vrh56.eur.nl
sap-bo-test.eur.nl
sis-acc-saml.eur.nl
dialogicplatform.com
cms-intra-test.eur.nl
nagiosbe.eur.nl
sympa-test.eur.nl
dialogicplatform.com
rdbroker-test.eur.nl
timetables.eur.nl
pclab-monitor.eur.nl
tartaros3.eur.nl
issuetracker.eur.nl
eurgame.eur.nl
aux-ldap-bundle.service.eur.nl
adminer.service.eur.nl
edugateway-G2.eur.nl
expertise-search-test.rsm.nl
horafinita.eur.nl
sm.eur.nl
studielink.eur.nl
iwmc-accept.service.eur.nl
eshcc-app.eur.nl
auth4mobile.eur.nl
rstudio.erim.eur.nl
ln-fe-pool.t-staff.eur.nl
planonweb.eur.nl
overleg.dia.eur.nl
sis-saml.eur.nl
saml-cms-intra-test.eur.nl
bskweb.eur.nl
crm4p-acc.eur.nl
sis-acc.eur.nl
examsheet.eur.nl
mailing-law.eur.nl
ds.eur.nl
www1.eur.nl
DA2016.eur.nl
EMS-ACC.EUR.NL
vacancies.eur.nl
eduroam-guest.eur.nl
wiki.fbk.eur.nl
libguides.eur.nl
sisapi-accept.eur.nl
sin-app03.app.eur.nl
sustainabilityreport.eur.nl
mydesktop.eur.nl
sb-test.eur.nl
myapps.eur.nl
access.eur.nl
masterrechtsgeleerdheid.eur.nl
isis.fbk.eur.nl
personal.eur.nl
foreman-test.infra.eur.nl
esl.eur.nl
eurgame-accept.eur.nl
feb22012.ese.eur.nl
certbroker.service.eur.nl
hobbes.frg.eur.nl
foreman-test.infra.eur.nl
ecda.eur.nl
gen-web01.app.eur.nl
dashboard.eur.nl

Certificate

The complete raw certificate details for sin-service-agglomerate2.service.eur.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15157717483598892934410822402181228617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erasmus Universiteit Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sin-service-agglomerate2.service.eur.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679598898776882340323077862964210488827934156661314854533103416829441900437513089931181213076559708969741012733588095521669187942214847013735770629731985983882482533692927425581106798513481771726863556522983149832527089159708832144604000569356601422877796412187202017488355564424580890492727543762044891402352969063307104969397432089726939318847472528690645409299382166663014056096878097733872607308575970391706502534502136866385578829652646633762189607076961413096138842967622189124836087613789099869567127256889721560691269016915221766710598419676489397518310297834719901992866750533053521472200633091769792258547548342327260022327521495338274744948244717660198624990923601178273811458501942315233382138544898136355172324990583353675265059562426704797235564502555016106163806662788137975450020551576555046484808504123168724478517223181042302207121739596557718738394037377156449926210889389209904265627439239745817594614432341724355140789618265460988952154457718228367591219545850562021673739406793683759746787518741478770164818348129158900671889714519649505400042579778917382257834664538613630774299166308836679432753838076640055994311845848927337006775125577971926975938355970600504412323621173838558096551567218788804752715825873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93e2296906525b68cf886fd4d62e7ee6c04ce975
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1403 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sin-service-agglomerate2.service.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'att.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmg.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsk.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsks.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bskweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.bskweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.collegeweb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.eduweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.exchangeprogramme.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.exchangeprogram.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.gmdweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.lawweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.psyweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.socweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeweb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookie.frg.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emc.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasmusmc.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ese.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshcc.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshpm.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esl.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esls.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essb.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essbs.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euc.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eucs.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eur.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangeprogramme.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangeprogram.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'few.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foldersave.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folders.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frg.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsw.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsws.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwb.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmdweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iss.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papersave.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papers.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psw.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psy.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pw.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pws.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsm.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soc.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socs.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumb.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bskweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegeweb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eduweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchangeprogramme.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchangeprogram.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmdweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psyweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socweb.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0025b64c7aa98fd0a0f1e99dca0f50be5bcb4998f0b27500b6c192ad70462590e7cf2004eb38a280c1ec202b393a4356d3989754611561ce82b03424cd95730f52c94d86eb287aa0e2636e7e93b656474e47b232772ddbfad20dc81a59394a44a3b2f5852de08e5dd4464e95cffbee5185a9c61da1ddeb409c1e93221e5559c4d430bc0892a1d3a714646aaa1fdf312e08a90a943585d37dcdf092ed061a820afa05d6204b69625bd891f59efc6fd7d198fd33fa163ba0b6e7598a864e7b436f43fd3ad9691d69e5439d534c0e24e134a3467ba4145287f0cff22199367ce5b6028fb9a7a445b4ee34bf9f538e69721b2d8547314d5bf68c4e3d1181513bae49e2