deic.dk
- DTU/DeiC -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 97:c5:26:3b:c9:2c:22:a3:21:25:c7:35:c1:a7:49:b5 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
DTU/DeiC
Organization:
DTU/DeiC
State / Province:
Hovedstaden
Country: DK
Country: DK
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate will expire on
Certificate Details
Serial Number (hex): 97:c5:26:3b:c9:2c:22:a3:21:25:c7:35:c1:a7:49:b5Serial Number (int): 201737085312940028236189040184878647733
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 9d:f2:31:29:48:61:2e:ad:46:85:4a:05:da:fa:77:be:65:7f:f9:54
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 5b:c8:1a:6d:e9:48:e1:1a:d5:44:d7:85:75:ba:3e:3e:21:8a:21:6e
Fingerprint (sha256): ac:ca:fb:fb:3f:bb:68:ec:18:2e:da:2c:d7:e7:af:dd:2f:97:0e:d0:ea:2c:a1:86:75:af:bc:22:59:f8:26:c4
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate deic.dk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for deic.dk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
deic.dk
www.deic.dk
www.deic.dk
Other certificates including the domain name deic.dk
(limited to 100 certificates)
gitlab.deic.dk
wayf.deic.dk
meet.deic.dk
filesender2.deic.dk
sciencedata.dk
unifi.net.deic.dk
gitlab.deic.dk
*.c.deic.dk
de161207.deic.dk
webpoint01.deic.eu
www.deic.dk
synore.sky.deic.dk
www.ddps.deic.dk
webpoint01.deic.eu
synnefo.sky.deic.dk
www.ddps.deic.dk
filesender.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
pithos.sky.deic.dk
gitlab.deic.dk
*.c.deic.dk
*.nyhedsbreve.deic.dk
dmponline.deic.dk
filesender.deic.dk
www.deic.dk
eduvpn.deic.dk
pf.deic.dk
info.net.deic.dk
www.cs3.deic.dk
de161207.deic.dk
gitlab.deic.dk
gitlab.deic.dk
wayf.c.deic.dk
wayf-udv.c.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
www.ddps.deic.dk
digiexam.deic.dk
blog.deic.dk
node68.sky.deic.dk
webstat.deic.dk
mitfsknet.deic.dk
eduvpn.deic.dk
test.data.deic.dk
gateway.dgw.deic.dk
*.dgw.deic.dk
eduvpn.deic.dk
admin.eduroam.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
pithore.sky.deic.dk
pithos.sky.deic.dk
c.deic.dk
*.c.deic.dk
www.abacus.deic.dk
dtuguest.deic.dk
c.deic.dk
sol.sky.deic.dk
gitlab.deic.dk
info.net.deic.dk
synore.sky.deic.dk
wayf.c.deic.dk
*.data.deic.dk
okeanos.deic.dk
pithos.deic.dk
silo1.data.deic.dk
info.net.deic.dk
data.deic.dk
webhotel.deic.dk
webpoint01.deic.eu
gitlab.deic.dk
www.blog.deic.dk
enav.net.deic.dk
unifi.net.deic.dk
digiexam.deic.dk
gitlab.deic.dk
gitlab.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
dtuguest.deic.dk
c.deic.dk
dmponline.deic.dk
deic.dk
*.dgw.deic.dk
filesender2.deic.dk
www.ddps.deic.dk
www.ddps.deic.dk
dmpsandbox.deic.dk
deic.dk
ipass.deic.dk
pithore.sky.deic.dk
synnefo.sky.deic.dk
*.dgw.deic.dk
webstat.deic.dk
radius1.eduroam.deic.dk
filesender.deic.dk
admin.eduroam.deic.dk
vidensportal.deic.dk
eduvpn.deic.dk
wayf.deic.dk
meet.deic.dk
filesender2.deic.dk
sciencedata.dk
unifi.net.deic.dk
gitlab.deic.dk
*.c.deic.dk
de161207.deic.dk
webpoint01.deic.eu
www.deic.dk
synore.sky.deic.dk
www.ddps.deic.dk
webpoint01.deic.eu
synnefo.sky.deic.dk
www.ddps.deic.dk
filesender.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
pithos.sky.deic.dk
gitlab.deic.dk
*.c.deic.dk
*.nyhedsbreve.deic.dk
dmponline.deic.dk
filesender.deic.dk
www.deic.dk
eduvpn.deic.dk
pf.deic.dk
info.net.deic.dk
www.cs3.deic.dk
de161207.deic.dk
gitlab.deic.dk
gitlab.deic.dk
wayf.c.deic.dk
wayf-udv.c.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
www.ddps.deic.dk
digiexam.deic.dk
blog.deic.dk
node68.sky.deic.dk
webstat.deic.dk
mitfsknet.deic.dk
eduvpn.deic.dk
test.data.deic.dk
gateway.dgw.deic.dk
*.dgw.deic.dk
eduvpn.deic.dk
admin.eduroam.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
pithore.sky.deic.dk
pithos.sky.deic.dk
c.deic.dk
*.c.deic.dk
www.abacus.deic.dk
dtuguest.deic.dk
c.deic.dk
sol.sky.deic.dk
gitlab.deic.dk
info.net.deic.dk
synore.sky.deic.dk
wayf.c.deic.dk
*.data.deic.dk
okeanos.deic.dk
pithos.deic.dk
silo1.data.deic.dk
info.net.deic.dk
data.deic.dk
webhotel.deic.dk
webpoint01.deic.eu
gitlab.deic.dk
www.blog.deic.dk
enav.net.deic.dk
unifi.net.deic.dk
digiexam.deic.dk
gitlab.deic.dk
gitlab.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
dtuguest.deic.dk
c.deic.dk
dmponline.deic.dk
deic.dk
*.dgw.deic.dk
filesender2.deic.dk
www.ddps.deic.dk
www.ddps.deic.dk
dmpsandbox.deic.dk
deic.dk
ipass.deic.dk
pithore.sky.deic.dk
synnefo.sky.deic.dk
*.dgw.deic.dk
webstat.deic.dk
radius1.eduroam.deic.dk
filesender.deic.dk
admin.eduroam.deic.dk
vidensportal.deic.dk
eduvpn.deic.dk
Certificate
The complete raw certificate details for deic.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIPzCCBiegAwIBAgIRAJfFJjvJLCKjISXHNcGnSbUwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTI0MDUwODAwMDAwMFoXDTI1MDUwODIz NTk1OVowSDELMAkGA1UEBhMCREsxFDASBgNVBAgTC0hvdmVkc3RhZGVuMREwDwYD VQQKEwhEVFUvRGVpQzEQMA4GA1UEAxMHZGVpYy5kazCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAL7uy/8vjY3Bi6gOimJOhvqm4sNkSCvMXg/4ZCuZESnw Kng8nFMMzmW4K8BM+86CqqhJh3Z1Oy4d6uZUwD6chgUOXFsXHQsooiuQZAh7G7+q JPtn8UodGEIRUHTmSzSTlsthRZ3KuJx087KmUOOpJot/OdRdRdQGy8qNoqEQveJp 5CiYPKaMc5K/PHXY7AlDnUqjxxrmsywfongIfihbyILx5FbFtowEtE7lDDJyjTq7 G4DfwD2zgPhZCIHMyJMqD7p+EEnPGgrwo5T24RXQHPRYs5+zA8Im4YwHWTFEbVD8 VcZyxSjUU5GBmnPw1QK+fLVE9pvSlpfabAQMtAytIJ5Dep+2tTrD7HQVTr+Jf5wE jb+jiP/tN5zkhywvpU/OmYv9RjMmmPN2owKInB8/IQdXBdQO3DPPONIlJBFVvveQ 3/pPVNrGVTf51Eap0L+zU8yK2OPvmQvY3E2DXnvGCTFMJEYB5pOh6WirkSCbjWnv /OXMZJJreVt0fC3BPanny2uLnieLvsd5EngvYGrqfhL1bMsZsHhfsU++KN87kCwq dPzcHJkEETw2BohKqJZNBKGWzEFWJZP4LeGs5o8aa31tmdQP5rDoUhGqeDhqBimN 0jnyKice2s1mQCZIAX0j4ezKq8QEnq212TRW4TP2EdR1vfzthIh83QjaGSrkZtEL AgMBAAGjggMmMIIDIjAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAd BgNVHQ4EFgQUnfIxKUhhLq1GhUoF2vp3vmV/+VQwDgYDVR0PAQH/BAQDAgWgMAwG A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1Ud IARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0 aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9H RUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUH AQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29t L0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2Nz cC5zZWN0aWdvLmNvbTAfBgNVHREEGDAWggdkZWljLmRrggt3d3cuZGVpYy5kazCC AX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHcAzxFW7tUufK/zh1vZaS6b6RpxZ0qw F+ysAdJbd87MOwgAAAGPVyUcAwAABAMASDBGAiEAiu2X0g1iMhElWvVxYrRjDZDk hu5bAoGPOjDZXTsWHxECIQD7g0ZoFvRTDExnhCfZz58NZlYeyD4l1TUkgFxlHarj zgB1AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABj1clG5oAAAQD AEYwRAIgIrIaLJvOuFSR13KFjFc97y6StINHMO0us8+946ZASJMCIG8Mjx6ib8fh f+gnH2o9vi0D4M9uIWA6OX0futxoAPHvAHUATnWjJ1yaEMM4W2zU3z9S6x3w4I4b jWnAsfpksWKaOd8AAAGPVyUbjQAABAMARjBEAiA5SFXJ2v+cTTK1dKTdzrldav/n 9hjvUd7yQk0Dy9ANlwIgUzREDli1WZx0w3EJOkxoDAuvjtpHY4xgRMxFFNzsFrUw DQYJKoZIhvcNAQEMBQADggIBADCQ5dDuuCU2BbqBYXMiQVdCtzejnMeuXhpNcvBj UhzGnJZkrNlBvri6w0g6qo2v5B4QW+HezOPboA0HQZ9HU5FI0Ur7Wet1RR6I94l+ BtbhnLQJd01A9ATqOnLh1kUDzcA+AsknNeX6QAfZ4UySBNu/dtCry+yvphGK076I w9YMCnx5XEBT8VvLI2NS/uVacj2ANI672nDWZwryvdCC+/Ll8jQ+AqbkpUAyuthJ nvBTBYXuCTZ8U2WtS0hct+DZEPIjifrLaU+6JYQVkSYW9mFLquhx7oaX3qdhn9yk f85e1VYvnI0/Xe2Au+TP488WIoiitiuT8joO0ltuinp9PA2UyECvk1QTHWEZs5qV B5318+B21zi6O2Zjk83cQAdzJghtNE7i+gOxIoy7KCNksz01E6ZUFH+i4wQETbmH E+LMYhy4RB+sZQtHBg09Kn3md/sf9WZy1d0c1olzcY6swbL31le2FVXmuJJtqcY4 mYx6AXSQBq0fL+HB0L5L51Xa3kVMEI6qWy4M64VaiMMzgmJTvkt+2XfYjTXZezJ1 WCwJTrn/+0/irin/DK/AysXm5T1ibQb0K7nipiUsplTpXRDAPmx8a/GH5AJ5UdZ8 tJhikqA6LlkyFAM74F01YABAAkAnt9vu6buJwFcRNgjT727FZ51Y2OTwhRAuKUIf s491 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvu7L/y+NjcGLqA6KYk6G +qbiw2RIK8xeD/hkK5kRKfAqeDycUwzOZbgrwEz7zoKqqEmHdnU7Lh3q5lTAPpyG BQ5cWxcdCyiiK5BkCHsbv6ok+2fxSh0YQhFQdOZLNJOWy2FFncq4nHTzsqZQ46km i3851F1F1AbLyo2ioRC94mnkKJg8poxzkr88ddjsCUOdSqPHGuazLB+ieAh+KFvI gvHkVsW2jAS0TuUMMnKNOrsbgN/APbOA+FkIgczIkyoPun4QSc8aCvCjlPbhFdAc 9Fizn7MDwibhjAdZMURtUPxVxnLFKNRTkYGac/DVAr58tUT2m9KWl9psBAy0DK0g nkN6n7a1OsPsdBVOv4l/nASNv6OI/+03nOSHLC+lT86Zi/1GMyaY83ajAoicHz8h B1cF1A7cM8840iUkEVW+95Df+k9U2sZVN/nURqnQv7NTzIrY4++ZC9jcTYNee8YJ MUwkRgHmk6HpaKuRIJuNae/85cxkkmt5W3R8LcE9qefLa4ueJ4u+x3kSeC9gaup+ EvVsyxmweF+xT74o3zuQLCp0/NwcmQQRPDYGiEqolk0EoZbMQVYlk/gt4azmjxpr fW2Z1A/msOhSEap4OGoGKY3SOfIqJx7azWZAJkgBfSPh7MqrxASerbXZNFbhM/YR 1HW9/O2EiHzdCNoZKuRm0QsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 201737085312940028236189040184878647733 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hovedstaden' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DTU/DeiC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deic.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778937865907684720376476990257539762135293584222906266360757153212037533076181189896915656321966591856491939127839428224188803599789361709847306379287514501559327648312600321043219638547426952292422510046604443719215398292360214125951040162251058026948270107691676168086598919179025227784530234875295811487427459425366150153419800641742688936999891584732098791648623830962285985621020090188468935122413728464549286368034584989595565941910963652856885873486836944757998075009849960444724118336139820472801074762437592030361342591391491342254552495295263286932572963485259965104338526148830116630949075103260644860564163776854196430991046505195029197105672706744728088752441551451885089080977325850964654176289823843167803890635002018925820268175729822675837814149063251099769227751419773594973715459865649215029107162072296817639904266007542695971300785384184942403593048645590037613105788353227820382583097348208641740435392356425122730337794615150154362447833816630032785154300964645468186984592083901226041248977857740853945884064401001609569500797873038289782539683812123031448223739677996644718747429783155281154107964181276925961062595209521416045871930754040779457697643860922098142374685320349492300787519989776650741567901963 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9df2312948612ead46854a05dafa77be657ff954 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deic.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deic.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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