mais.truni.sk

- Trnavská univerzita v Trnave -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number a1:7c:5c:7e:00:f7:d8:bb:63:22:e7:f7:fe:b1:d1:95 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trnavská univerzita v Trnave

Organization: Trnavská univerzita v Trnave
State / Province: Trnavský kraj
Country: SK

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): a1:7c:5c:7e:00:f7:d8:bb:63:22:e7:f7:fe:b1:d1:95
Serial Number (int): 214651428096561415079726040228098593173
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cb:08:28:4d:26:1a:d3:ed:ab:85:9f:04:96:1a:42:7e:25:52:c9:d3
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 4e:83:d4:84:4b:bc:d2:2d:3e:a6:fe:3d:fc:ba:8d:33:0e:82:d3:c7
Fingerprint (sha256): ac:8a:f7:9a:40:35:1b:53:71:64:8e:df:b3:ef:10:28:32:76:b3:f4:b4:86:86:1c:f3:71:68:e2:df:4c:22:dc

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate mais.truni.sk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mais.truni.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mais.truni.sk
ects.truni.sk
student.truni.sk

Other certificates including the domain name truni.sk

(limited to 100 certificates)
webmail.truni.sk
webmail.tvu.sk
www.truni.sk
idmportal.truni.sk
wap.truni.sk
webmail.truni.sk
meteo.truni.sk
pdf.truni.sk
strava.truni.sk
indukcia.truni.sk
www.truni.sk
ezp.truni.sk
sts.truni.sk
ff.truni.sk
www.truni.sk
sibidp.truni.sk
meteo.truni.sk
vpn.truni.sk
pdf.truni.sk
shib-idp.truni.sk
rlgc.truni.sk
strava.truni.sk
moodle.truni.sk
webmail.tvu.sk
www.truni.sk
strava.truni.sk
strava.truni.sk
connect.truni.sk
rdgateway.truni.sk
radius2.truni.sk
esmc.truni.sk
strava.truni.sk
strava.truni.sk
ezp.truni.sk
strava.truni.sk
www.truni.sk
eshop.truni.sk
sts.truni.sk
mais.truni.sk
3point.truni.sk
idmportal.truni.sk
radius1.truni.sk
fzsp.truni.sk
mais.truni.sk
www.truni.sk
moodletest.truni.sk
mais.truni.sk
rlgc.truni.sk
student.truni.sk
kybez.truni.sk
3point.truni.sk
webmail.truni.sk
ezp.truni.sk
sip.truni.sk
fmc.truni.sk
mais.truni.sk
remlabgrab.truni.sk
idmportal.truni.sk
rdweb.truni.sk
webmail.tvu.sk
idmportal.truni.sk
rdweb.truni.sk
indukcia.truni.sk
skype.truni.sk
pf.truni.sk
kybez.truni.sk
moodle.truni.sk
webmail.truni.sk

Certificate

The complete raw certificate details for mais.truni.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHezCCBWOgAwIBAgIRAKF8XH4A99i7YyLn9/6x0ZUwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDEyOTAwMDAwMFoXDTI0MDEyOTIz
NTk1OVowZjELMAkGA1UEBhMCU0sxFzAVBgNVBAgMDlRybmF2c2vDvSBrcmFqMSYw
JAYDVQQKDB1Ucm5hdnNrw6EgdW5pdmVyeml0YSB2IFRybmF2ZTEWMBQGA1UEAxMN
bWFpcy50cnVuaS5zazCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL4D
YwEJK8tMkn733mYtHp+ojv3qXrANVyiQq19biZug6/rxpd9hl4bLrFJEQlJFW3KC
72nI/nIzbGqFbA6XWdB3SxBbH2Mfu2K4ExhqT1uvE3zqwyhGyjJEPAZer+N9OIbW
mLrd3X0epYc5I3tv23sVUtG2pctacir8Ds1w9SxJXhr+3GiDRInDHEnbEHlDXbQa
yoRrks/hrHW4tXThiXZavw90SAKhCvUG+YT5PUYbCDb6d8PJYtVq3kMaqs9dpWyb
KetYgW+A7LBz64wWudhnfbPuMGe+l33fjdPH4FEefcQJ/TlXZREhQzfvh9B+30er
w/nXmDyRi29NaIjPonsCAwEAAaOCA0QwggNAMB8GA1UdIwQYMBaAFG8dNUkQbDL6
WaCevIroH5W+cXoMMB0GA1UdDgQWBBTLCChNJhrT7auFnwSWGkJ+JVLJ0zAOBgNV
HQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIB
FhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0
oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0
LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5j
cnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0
dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMIIBgQYKKwYBBAHWeQIEAgSCAXEE
ggFtAWsAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYX65JAF
AAAEAwBIMEYCIQDGELeUaUZ4dnhGEhFsvsyEN/0MJnN9rtwqBGKhJ6f/LgIhAIQd
PsjN7UkEHwy7qOd5cZzIuavd6tHP+uR88oChs9s3AHcA2ra/az+1tiKfm8K7XGvo
cJFxbLtRhIU0vaQ9MEjX+6sAAAGF+uSP8gAABAMASDBGAiEA+Lq3YqM1f6hi9YvO
O8u6A5PuhbeGdCgR8IITV1I8W+sCIQDU8sKQfZ5eeX4X/mH99FLCvRzkM8T8FP5U
LwtnQIHZhgB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhfrk
j84AAAQDAEgwRgIhAOdPyI1vvLDugVkhWOl0HqopbGqynm3Nw0DQdINoXynWAiEA
y7BEAFLT4DoErL/7rs/w/LkxHd0L75ELA3ISevLcY9EwOQYDVR0RBDIwMIINbWFp
cy50cnVuaS5za4INZWN0cy50cnVuaS5za4IQc3R1ZGVudC50cnVuaS5zazANBgkq
hkiG9w0BAQwFAAOCAgEAchW+jZJHFiWwn0mCv8muutZckzNmqEGt/7IRoxHoR+xK
OqlS7t7yRsapcTt/EgXTCAFLh1oGhwEkNJVYLSkwCsAXWsKCz7u83hi2VMyRxkl/
g1JFwFaod59q7Lj7b0U6GfhkcBmaVp/K+pl9E213F4hIx2Us5ilxhumJAkdLQ+aj
YAKs5ODGTbsrORHyDN7g7PFU+61IeXQkCMzipaL7PZ/2WSKsyWZDoxaiHGKJ+D2A
5WVPtNZ3FBy76bqMov4rSy9//qtkPUjHtFiZtC1d7g7Ww3PoLIRas+jfqXOMb+Dr
TXiuO7sDtYY/Hu4EI6IpLxnaObIMtSpSWRDY8rpulWiGFDOw6sLjITo+W4/ScxZc
qEaWjBqyODLkPV5QwfCNcAaKioVGJwLqlQydwO3budgXgivtKLw2qawwzpmCOskh
fBSHdhpfU54htlL5rNq30rPcZBPB1AsZ5ZEQg4COlX/ePHTpF/UOSVPbWWVXGTDU
tECyFSXf9bXXw175JdCKeUpVNFhGVWu+HYb8ckL/2Ru2eTXEogENmwB8H3agbmUi
NKIDu5bk++rbkoX9Pxy8eRhmxes8xLSzZIJuxyytH3G06RteiIPB84YyEYR9BZmo
hg13/BtSFRIjp6sKeaGE0Q3LjywpssPaYP5UJ6Ion7vz/OpBwi2DXafj673bzdE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgNjAQkry0ySfvfeZi0e
n6iO/epesA1XKJCrX1uJm6Dr+vGl32GXhsusUkRCUkVbcoLvacj+cjNsaoVsDpdZ
0HdLEFsfYx+7YrgTGGpPW68TfOrDKEbKMkQ8Bl6v4304htaYut3dfR6lhzkje2/b
exVS0baly1pyKvwOzXD1LEleGv7caINEicMcSdsQeUNdtBrKhGuSz+Gsdbi1dOGJ
dlq/D3RIAqEK9Qb5hPk9RhsINvp3w8li1WreQxqqz12lbJsp61iBb4DssHPrjBa5
2Gd9s+4wZ76Xfd+N08fgUR59xAn9OVdlESFDN++H0H7fR6vD+deYPJGLb01oiM+i
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 214651428096561415079726040228098593173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trnavský kraj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trnavská univerzita v Trnave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mais.truni.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23986948004604447385372228988588518614018403450200225570458434685417918384214613377833044936983095684368642742020719941278152771804613450108789543006901133775095148965332029205783462530750316691560608108019358463090025655399285189554941165144603455617155596211853615749040296448891029453901348932506492741176388822317765369371987330378768755556834170190731642965443303715083838415489172457328161180571548228411700589510331340156170907426010006635369546498941566159394655435136858202378629642454294231624379107655995754493006831185166050658794447685555067693445821955827675453543126490844411746956848088774929839792763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb08284d261ad3edab859f04961a427e2552c9d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mais.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ects.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.truni.sk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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