sin-online-service-bundle-prod.service.eur.nl

- Erasmus Universiteit Rotterdam -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 03:25:e5:63:d9:22:4c:8a:7c:4b:41:5f:e5:bf:05:2f was issued on by TERENA.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Erasmus Universiteit Rotterdam

Organization: Erasmus Universiteit Rotterdam
Locality: Rotterdam
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:e5:63:d9:22:4c:8a:7c:4b:41:5f:e5:bf:05:2f
Serial Number (int): 4184451553707573449222036960678184239
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 00:5e:73:6d:fe:f7:01:69:f5:43:61:4b:30:a1:88:17:c5:56:d2:52
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): cc:92:bf:c2:6e:1d:44:e1:7d:58:60:13:82:0f:c9:00:b9:dc:0e:09
Fingerprint (sha256): d0:38:ad:a6:b3:5e:b6:61:f0:d5:ac:06:80:2c:24:4d:0c:62:2d:f4:ed:67:e3:4c:2a:b4:4c:ce:33:36:74:bf

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate sin-online-service-bundle-prod.service.eur.nl

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sin-online-service-bundle-prod.service.eur.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sin-online-service-bundle-prod.service.eur.nl
att.sin-online.nl
auth-prod.sin-online.nl
auth.sin-online.nl
bmg.sin-online.nl
bsk.sin-online.nl
bsks.sin-online.nl
cookie.sin-online.eur.nl
cookie.frg.eur.nl
db.sin-online.nl
emc.sin-online.nl
ep.sin-online.nl
ese.sin-online.nl
eshcc.sin-online.nl
eshpm.sin-online.nl
esl.sin-online.nl
esls.sin-online.nl
essb.sin-online.nl
essbs.sin-online.nl
esphil.sin-online.nl
euc.sin-online.nl
eucs.sin-online.nl
eur.sin-online.nl
folders.sin-online.nl
foldersave.sin-online.nl
fsw.sin-online.nl
fsws.sin-online.nl
fwb.sin-online.nl
iss.sin-online.nl
media.sin-online.nl
papers.sin-online.nl
papersave.sin-online.nl
photos.sin-online.nl
psw.sin-online.nl
psy.sin-online.nl
pw.sin-online.nl
pws.sin-online.nl
queue.sin-online.nl
rsm.sin-online.nl
services.sin-online.nl
sin-online.nl
soc.sin-online.nl
socs.sin-online.nl
sso.sin-online.nl
storage.sin-online.nl
thumb.sin-online.nl
turnitin-service.sin-online.nl
uploads.sin-online.nl
video.sin-online.nl
www-idm.sin-online.nl
www.sin-online.nl

Other certificates including the domain name eur.nl

(limited to 100 certificates)
h5p.eur.nl
dialogicplatform.com
db-bundle.sin-online.nl
www.erim.eur.nl
masterhealtheconomics.eur.nl
dialogicplatform.com
monitor.mgt.eur.nl
topdesk.eur.nl
psp.eur.nl
feb21011.ese.eur.nl
superoffice.holding.eur.nl
gallery.erim.eur.nl
login-accept.ds.eur.nl
pma.eur.nl
Bizzdesing.eur.nl
www1.eur.nl
alumni.eur.nl
sin-online-service-bundle.service.eur.nl
bko.eur.nl
asklepios.eur.nl
mybeta.eur.nl
overleg.eur.nl
people.few.eur.nl
ess.eur.nl
www.horafinita-accept.eur.nl
ess-test.eur.nl
timetables.eur.nl
thetheorymarket.eur.nl
mis-api-test.erim.eur.nl
hawk.eur.nl
rdbroker20-test.eur.nl
ns1.bvdu.eur.nl
ebs.eur.nl
resourcebooker.eur.nl
masterinternationalandeuropeanpubliclaw.eur.nl
www.webshop.eur.nl
trackeur-bundle.api.eur.nl
vrh56.eur.nl
sap-bo-test.eur.nl
sis-acc-saml.eur.nl
dialogicplatform.com
cms-intra-test.eur.nl
nagiosbe.eur.nl
sympa-test.eur.nl
dialogicplatform.com
rdbroker-test.eur.nl
timetables.eur.nl
pclab-monitor.eur.nl
tartaros3.eur.nl
issuetracker.eur.nl
eurgame.eur.nl
aux-ldap-bundle.service.eur.nl
adminer.service.eur.nl
edugateway-G2.eur.nl
expertise-search-test.rsm.nl
horafinita.eur.nl
sm.eur.nl
studielink.eur.nl
iwmc-accept.service.eur.nl
eshcc-app.eur.nl
auth4mobile.eur.nl
rstudio.erim.eur.nl
ln-fe-pool.t-staff.eur.nl
planonweb.eur.nl
overleg.dia.eur.nl
sis-saml.eur.nl
saml-cms-intra-test.eur.nl
bskweb.eur.nl
crm4p-acc.eur.nl
sis-acc.eur.nl
examsheet.eur.nl
mailing-law.eur.nl
ds.eur.nl
www1.eur.nl
DA2016.eur.nl
EMS-ACC.EUR.NL
vacancies.eur.nl
eduroam-guest.eur.nl
wiki.fbk.eur.nl
libguides.eur.nl
sisapi-accept.eur.nl
sin-app03.app.eur.nl
sustainabilityreport.eur.nl
mydesktop.eur.nl
sb-test.eur.nl
myapps.eur.nl
access.eur.nl
masterrechtsgeleerdheid.eur.nl
isis.fbk.eur.nl
personal.eur.nl
foreman-test.infra.eur.nl
esl.eur.nl
eurgame-accept.eur.nl
feb22012.ese.eur.nl
certbroker.service.eur.nl
hobbes.frg.eur.nl
foreman-test.infra.eur.nl
ecda.eur.nl
gen-web01.app.eur.nl
dashboard.eur.nl

Certificate

The complete raw certificate details for sin-online-service-bundle-prod.service.eur.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL6DCCCtCgAwIBAgIQAyXlY9kiTIp8S0Ff5b8FLzANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xOTA4MjcwMDAwMDBaFw0yMTA4MzExMjAwMDBaMIGCMQswCQYDVQQG
EwJOTDESMBAGA1UEBxMJUm90dGVyZGFtMScwJQYDVQQKEx5FcmFzbXVzIFVuaXZl
cnNpdGVpdCBSb3R0ZXJkYW0xNjA0BgNVBAMTLXNpbi1vbmxpbmUtc2VydmljZS1i
dW5kbGUtcHJvZC5zZXJ2aWNlLmV1ci5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBAN+3TM4byTtKVSDqIGHXmUBxeRdAoVQbvsVqFftos5neFWW061pf
4ygjzUvUmFBGfoF/NE3JSWl6i5Wkm9h4DLM0489EcQpm1hZuIKBdy9TRYz3YpoCk
VS2j6OtxeXCb+PQxaSDcCaeI77Jw+j15UguqBTBDd5n8kmbaO6a540adCN1qfhfT
3IdcAh16hlQ+SeiXEkcTysfm7GUZlACOhoFOzbxecvqsKmgTzwmbtsAW0Sn45Q7H
OXo+DHnln+QIBjvKc1LBAPA06b90boXieQNYKsusD9AMWvVDw+IkIchu6saBCHHI
F6HhRHr8r4L/R7JNxU7D2DRwPLgsc/fhmKDJGBnbGuF9yLsLY6lv1Imb9r2vwV+j
EL5XmHAOhXchnnLrrsk5mwIC7wCyOafIM/YF6+GPH6wxfVLdHtOvyfIVXg0aLroM
qP8D4DrH3Ce3v84AIyAfAvWgyLfMCEc7vS+SZqYlf3uHdZLstouqofCvWWmVLTaz
Tnl6tAxpjY7CUkkGMouz18gh9JVqKbv3zE+ZqRLaHGnQb3YjnK8edtP5fDWbuB5q
M+NzN2Q6PahxcpXkNkijiJo8hTF2uy2hZCdonbpufQ4OOagczLmiNfc/F59hlJDw
dX73eIQJY3pCZ+H+QqOzJ6puY/J1D9LWN2/CKOPEaz9bFfOpxiWV26JvAgMBAAGj
ggd1MIIHcTAfBgNVHSMEGDAWgBRn/YggFCeYxwnSJRm76VERY3VQYjAdBgNVHQ4E
FgQUAF5zbf73AWn1Q2FLMKGIF8VW0lIwggRFBgNVHREEggQ8MIIEOIItc2luLW9u
bGluZS1zZXJ2aWNlLWJ1bmRsZS1wcm9kLnNlcnZpY2UuZXVyLm5sghFhdHQuc2lu
LW9ubGluZS5ubIIXYXV0aC1wcm9kLnNpbi1vbmxpbmUubmyCEmF1dGguc2luLW9u
bGluZS5ubIIRYm1nLnNpbi1vbmxpbmUubmyCEWJzay5zaW4tb25saW5lLm5sghJi
c2tzLnNpbi1vbmxpbmUubmyCGGNvb2tpZS5zaW4tb25saW5lLmV1ci5ubIIRY29v
a2llLmZyZy5ldXIubmyCEGRiLnNpbi1vbmxpbmUubmyCEWVtYy5zaW4tb25saW5l
Lm5sghBlcC5zaW4tb25saW5lLm5sghFlc2Uuc2luLW9ubGluZS5ubIITZXNoY2Mu
c2luLW9ubGluZS5ubIITZXNocG0uc2luLW9ubGluZS5ubIIRZXNsLnNpbi1vbmxp
bmUubmyCEmVzbHMuc2luLW9ubGluZS5ubIISZXNzYi5zaW4tb25saW5lLm5sghNl
c3Nicy5zaW4tb25saW5lLm5sghRlc3BoaWwuc2luLW9ubGluZS5ubIIRZXVjLnNp
bi1vbmxpbmUubmyCEmV1Y3Muc2luLW9ubGluZS5ubIIRZXVyLnNpbi1vbmxpbmUu
bmyCFWZvbGRlcnMuc2luLW9ubGluZS5ubIIYZm9sZGVyc2F2ZS5zaW4tb25saW5l
Lm5sghFmc3cuc2luLW9ubGluZS5ubIISZnN3cy5zaW4tb25saW5lLm5sghFmd2Iu
c2luLW9ubGluZS5ubIIRaXNzLnNpbi1vbmxpbmUubmyCE21lZGlhLnNpbi1vbmxp
bmUubmyCFHBhcGVycy5zaW4tb25saW5lLm5sghdwYXBlcnNhdmUuc2luLW9ubGlu
ZS5ubIIUcGhvdG9zLnNpbi1vbmxpbmUubmyCEXBzdy5zaW4tb25saW5lLm5sghFw
c3kuc2luLW9ubGluZS5ubIIQcHcuc2luLW9ubGluZS5ubIIRcHdzLnNpbi1vbmxp
bmUubmyCE3F1ZXVlLnNpbi1vbmxpbmUubmyCEXJzbS5zaW4tb25saW5lLm5sghZz
ZXJ2aWNlcy5zaW4tb25saW5lLm5sgg1zaW4tb25saW5lLm5sghFzb2Muc2luLW9u
bGluZS5ubIISc29jcy5zaW4tb25saW5lLm5sghFzc28uc2luLW9ubGluZS5ubIIV
c3RvcmFnZS5zaW4tb25saW5lLm5sghN0aHVtYi5zaW4tb25saW5lLm5sgh50dXJu
aXRpbi1zZXJ2aWNlLnNpbi1vbmxpbmUubmyCFXVwbG9hZHMuc2luLW9ubGluZS5u
bIITdmlkZW8uc2luLW9ubGluZS5ubIIVd3d3LWlkbS5zaW4tb25saW5lLm5sghF3
d3cuc2luLW9ubGluZS5ubDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRp
Z2ljZXJ0LmNvbS9URVJFTkFTU0xDQTMuY3JsMC+gLaArhilodHRwOi8vY3JsNC5k
aWdpY2VydC5jb20vVEVSRU5BU1NMQ0EzLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG
/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BT
MAgGBmeBDAECAjBuBggrBgEFBQcBAQRiMGAwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmRpZ2ljZXJ0LmNvbTA4BggrBgEFBQcwAoYsaHR0cDovL2NhY2VydHMuZGln
aWNlcnQuY29tL1RFUkVOQVNTTENBMy5jcnQwDAYDVR0TAQH/BAIwADCCAXwGCisG
AQQB1nkCBAIEggFsBIIBaAFmAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZk
No4e0YUAAAFs0xVhewAABAMARzBFAiBZUBj2lvrPCa2vGXdY6xkPqGsYJ19Aq7az
k8c76bKb2QIhAJRw0gSVFu7UcW6/RVJQB0e7iQg09WK5NjGdfsH0QixBAHUAh3W/
51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFs0xVhyQAABAMARjBEAiBU
VHGOZ24VD6RUg/jYnUYJ1+JO12BG7EmuhQ3XDnB2OAIgZu1LMrHNvRHz181nf0oR
N5cSdrGKyVzQSCTrCI87asMAdQBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOW
tbaBqAAAAWzTFWDRAAAEAwBGMEQCIGwwoX50IjtjVe+Yf1u8ZhYhhyeWtmXq9ESC
dfU6pVUHAiAQ4G27hLGJsffxSCCNCw1jkRWG3D6f0kIeeY7WMkOIPTANBgkqhkiG
9w0BAQsFAAOCAQEAWg0Qxr06Yi/+33q1SejBTNIxSvwr16dGGA2NDAAYJs1p43UR
tw+z3J8vtEi/6wixt/ajjU2vDUlL7LUBUMXEOyFn623/jX+lYz2yzLNRwe2lri6o
K28ZlKCGgMzoPSMtDSTwx3u8QkVuCR6Grga0OzEdd/ZHIYxehn4J04iXqdDX82Ux
AfgrJmBM9jL+DgOQ5MhlOK57TAaeaiNFmDNaBThaOhPOmsoNwSYgeU4WYeeaVC5j
3SNDnmT+VQlBCcLVkLYsGqNJRqfTAX/U3IUsVnVkImAh1xDvribO3Oq0FdX0quuT
pa+7c8udvwEJXH4D3KBsuy/txZxdxN4g5MkpoQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA37dMzhvJO0pVIOogYdeZ
QHF5F0ChVBu+xWoV+2izmd4VZbTrWl/jKCPNS9SYUEZ+gX80TclJaXqLlaSb2HgM
szTjz0RxCmbWFm4goF3L1NFjPdimgKRVLaPo63F5cJv49DFpINwJp4jvsnD6PXlS
C6oFMEN3mfySZto7prnjRp0I3Wp+F9Pch1wCHXqGVD5J6JcSRxPKx+bsZRmUAI6G
gU7NvF5y+qwqaBPPCZu2wBbRKfjlDsc5ej4MeeWf5AgGO8pzUsEA8DTpv3RuheJ5
A1gqy6wP0Axa9UPD4iQhyG7qxoEIccgXoeFEevyvgv9Hsk3FTsPYNHA8uCxz9+GY
oMkYGdsa4X3IuwtjqW/UiZv2va/BX6MQvleYcA6FdyGecuuuyTmbAgLvALI5p8gz
9gXr4Y8frDF9Ut0e06/J8hVeDRouugyo/wPgOsfcJ7e/zgAjIB8C9aDIt8wIRzu9
L5JmpiV/e4d1kuy2i6qh8K9ZaZUtNrNOeXq0DGmNjsJSSQYyi7PXyCH0lWopu/fM
T5mpEtocadBvdiOcrx520/l8NZu4Hmoz43M3ZDo9qHFyleQ2SKOImjyFMXa7LaFk
J2idum59Dg45qBzMuaI19z8Xn2GUkPB1fvd4hAljekJn4f5Co7Mnqm5j8nUP0tY3
b8Io48RrP1sV86nGJZXbom8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4184451553707573449222036960678184239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erasmus Universiteit Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sin-online-service-bundle-prod.service.eur.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912681716383821211544001201232663938079750200849568456251353777383614026922990133513936712154546508646811932291158835682702314507944622306065049470792149522529084365808258121597729882743760836004019485737302207006892485577089165842515128225713589276329580764614006358734424752487573839559588282456685552817036339384332457335948683279083600251244633436174264117399125095638642900113723222739096059540816864352686340709241245987973031142473667266113859088609610069778081425424542594273845809491732398487132902577743533171513557940846568114215352346219601826459717749866063636596964538343506669934976266806165865094053892502269558520647347439002489512425721713514084532765710948281393057613035221023565629950654839261858472041206172863260260449320485934266170787022635859368322008707051947541124959793260960166183045100976761083884044628479099752231347010567032113133302135667239819019427052134818229708042862445874500696003587037799543059785976439511377509698975468685716477248242022401349049063922948284828420388112997250757113618343884141573373282782477684760300006912090343158366542060716460942370785957491800477824609453010174542612867438459218344283943152057804524148074122671945705679793621917666783973705238323169216284786926191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							005e736dfef70169f543614b30a18817c556d252
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1084 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sin-online-service-bundle-prod.service.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'att.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-prod.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmg.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsk.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsks.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookie.sin-online.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookie.frg.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emc.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ese.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshcc.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshpm.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esl.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esls.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essb.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essbs.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esphil.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euc.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eucs.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eur.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folders.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foldersave.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsw.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsws.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwb.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iss.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papers.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papersave.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psw.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psy.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pw.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pws.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsm.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soc.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socs.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumb.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnitin-service.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-idm.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sin-online.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a0d10c6bd3a622ffedf7ab549e8c14cd2314afc2bd7a746180d8d0c001826cd69e37511b70fb3dc9f2fb448bfeb08b1b7f6a38d4daf0d494becb50150c5c43b2167eb6dff8d7fa5633db2ccb351c1eda5ae2ea82b6f1994a08680cce83d232d0d24f0c77bbc42456e091e86ae06b43b311d77f647218c5e867e09d38897a9d0d7f3653101f82b26604cf632fe0e0390e4c86538ae7b4c069e6a234598335a05385a3a13ce9aca0dc12620794e1661e79a542e63dd23439e64fe55094109c2d590b62c1aa34946a7d3017fd4dc852c567564226021d710efae26cedceab415d5f4aaeb93a5afbb73cb9dbf01095c7e03dca06cbb2fedc59c5dc4de20e4c929a1