ex2016-prd-uva.lb.uva.nl

- Universiteit van Amsterdam -

Issued by GEANT EV RSA CA 4

About this certificate

This digital certificate with serial number 15:b6:2a:fd:0c:90:07:82:33:d1:b8:29:58:b2:2a:4b was issued on by GEANT Vereniging.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit van Amsterdam

Company registration number: 34370207
Organization: Universiteit van Amsterdam
Address: Spui 21
Postal code: 1012WX
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 15:b6:2a:fd:0c:90:07:82:33:d1:b8:29:58:b2:2a:4b
Serial Number (int): 28859657849552982332664440698380102219
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 3c:19:e2:2f:81:85:cd:91:1d:63:00:4b:0e:fd:b7:25:44:5c:5e:07
AuthorityKeyId: b6:20:0e:ae:a3:cb:e9:55:03:06:13:66:d4:ac:be:27:90:54:60:f3

Fingerprint (sha1): d7:cb:f6:ce:a5:f5:c5:7d:0d:c6:6d:24:04:9a:90:d5:ff:b3:fa:31
Fingerprint (sha256): be:e1:d4:f9:8f:03:cd:e7:d9:bf:b3:5e:1e:01:5a:9a:ed:2d:4f:e7:d3:7c:fc:66:58:f4:97:47:bd:e8:bf:cc

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl

Check the revocation status for certificate ex2016-prd-uva.lb.uva.nl

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ex2016-prd-uva.lb.uva.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ex2016-prd-uva.lb.uva.nl
activesync.foret.nl
activesync.ic.uva.nl
activesync.uva.nl
autodiscover.auc.nl
autodiscover.contact.uva.nl
autodiscover.crea.uva.nl
autodiscover.folia.nl
autodiscover.folia.uva.nl
autodiscover.foret.nl
autodiscover.usc.uva.nl
autodiscover.uva.nl
ex2016-prd-uva.lb.uha.nl
hub01.uva.nl
hub02.uva.nl
imap.foret.nl
imap.uva.nl
legacy.foret.nl
legacy.uva.nl
nlbe2010-hva.ic.uva.nl
nlbe2010.ic.uva.nl
pop.foret.nl
pop.uva.nl
servermail.foret.nl
servermail.ic.uva.nl
servermail.uva.nl
smtp.foret.nl
smtp.uva.nl
webmail.foret.nl
webmail.ic.uva.nl
webmail.uva.nl

Other certificates including the domain name uva.nl

(limited to 100 certificates)
elrond.ic.uva.nl
spin.spinnet.eu
parijs-deeltijd2016.humanities.uva.nl
sap-dev-rudx.ic.uva.nl
fullfabric.com
mobiusportal.uva.dev.icts.education
medewerker.uva.nl
schoolmuseum.uba.uva.nl
filmstudies.nl
amsterdam1544.humanities.uva.nl
www.fon.hum.uva.nl
studiegids.beheer.uva.nl
agile099.science.uva.nl
smdmmstreamprd.ic.uva.nl
idm-beheer.ic.uva.nl
academy.socsci.uva.nl
humanities.uva.nl
blendedlearning.socsci.uva.nl
sap-acc-ruax.ic.uva.nl
transparency.humanities.uva.nl
dutchcycling.socsci.uva.nl
educsys.uva.nl
slpl.science.uva.nl
ahmpostcolonialmemory.humanities.uva.nl
publichistory.humanities.uva.nl
zaken.test.uva.nl
roosterportal-tst.uva.nl
humanities.uva.nl
onderzoekmobw.socsci.uva.nl
cas-acc.ic.uva.nl
content-dev.sap.uva.nl
analytics.ic.uva.nl
agile042.science.uva.nl
smdmmstreamprd.ic.uva.nl
antondekom.humanities.uva.nl
digitaal.uba.uva.nl
mijn.usc.uva.nl
id-dev.ic.uva.nl
cas5-acc.lb.uva.nl
www.fnwi.uva.nl
nra-tst.sis.uva.nl
peoplexs.humanities.uva.nl
www.startmedewerker.uva.nl
docentenkamer.humanities.uva.nl
seop.illc.uva.nl
dom-prd1.ic.uva.nl
gbs-prd-kb2.gbs.uva.nl
antondekom.humanities.uva.nl
cleverdon.hum.uva.nl
acc.sis.uva.nl
feeding-the-city.create.humanities.uva.nl
learninglab.uva.nl
secure-apis.hva.nl
spin.spinnet.eu
webformulieren.uva.nl
smdmm3sb-prd.lb.uva.nl
corpnet.uva.nl
usc.uva.nl
readers.uva.nl
blackboard.uva.nl
gartnerportal.uva.prd.icts.education
agile117.science.uva.nl
paying-dev.uva.nl
agile152.science.uva.nl
www.gbs-prd-kb2.gbs.uva.nl
evasys.uva.nl
dpc.uba.uva.nl
100yearsofenglish.humanities.uva.nl
tlc.uva.nl
sils-fairspace.science.uva.nl
comtesttool.humanities.uva.nl
secure.uva.nl
smdmmstreamprd.ic.uva.nl
maven.ic.uva.nl
filmstudies.nl
cities.humanities.uva.nl
netbox.forux.nl
diensten.uba.uva.nl
agile235.science.uva.nl
axiom.humanities.uva.nl
studiegids.beheer.uva.nl
gitlab.ic.uva.nl
datanose.science.uva.nl
ldapad.uva.nl
educsys.uva.nl
vanmensending.humanities.uva.nl
agile123.science.uva.nl
appstore.uva.nl
reader.humanities.uva.nl
archives.uba.uva.nl
ex2016-prd-hva.lb.uva.nl
cf.humanities.uva.nl
cms-prd-www.lb.uva.nl
api.paying.uva.nl
*.proxy.uba.uva.nl
medina.ic.uva.nl
publicintervention.humanities.uva.nl
www.usc.uva.nl
parola.humanities.uva.nl
agile201.science.uva.nl

Certificate

The complete raw certificate details for ex2016-prd-uva.lb.uva.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28859657849552982332664440698380102219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT EV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '34370207'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1012WX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Spui 21'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ex2016-prd-uva.lb.uva.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713387327298591559877977577030825503087175943511529015631443671810554183632778521796689948121192295408771759011124893849545798639797517073991621568702523961244175776163779076388693445670489485435719641699128047152182677405940477452861649339744990965353612223932413117485827658456649192886053270623287501862433682269888496815543054899078150656274525662366205393845953224606442070903168082997354280439012712846252974522720951682078589431315079352166426650218891505516925564626938404107261410768709553582137802250364560158938365549004648181681732067862938537448144658949480389163959983309965219573517076141679059175507849400681323794670480282025336651415999498683090927894197714963837507169836107015630372384995404912906680394914240536060262434073939393671979175841683821783774824059140489601024087221936423931193435909245302428344787487310011008157339967547614401684465317354764112373124070867271792594386822598013082001840457323641860193000136059462260391033838237510396323737006235006056835444038706115444421262521000037736353664687149267771065752856305944287140158657138040620002713927465920576755818774011958950041549912398033929158320627468065698098434449562423542691776354799558298880137874584932281413560688199351216053077363663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6200eaea3cbe95503061366d4acbe27905460f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c19e22f8185cd911d63004b0efdb725445c5e07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex2016-prd-uva.lb.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesync.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesync.ic.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesync.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.auc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.contact.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.crea.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.folia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.folia.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.usc.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex2016-prd-uva.lb.uha.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub01.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub02.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlbe2010-hva.ic.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlbe2010.ic.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servermail.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servermail.ic.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servermail.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.foret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ic.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.uva.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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