Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b8:4a:fd:49:57:6b:21:a3:f2:5f:63:eb:b6:83:19:8c
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = NL, O = GEANT Vereniging, CN = GEANT OV ECC CA 4
        Validity
            Not Before: Oct 11 00:00:00 2022 GMT
            Not After : Oct 11 23:59:59 2023 GMT
        Subject: C = FI, ST = Uusimaa, O = Aalto University Foundation sr, CN = aalto.fi
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:ea:08:1d:24:18:09:79:09:8b:eb:08:47:15:59:
                    61:97:e8:8a:f1:d6:56:90:91:0f:d4:b4:95:8d:56:
                    a9:88:2d:67:f6:a9:7e:c3:82:21:6f:48:21:c0:76:
                    d9:7c:8f:31:23:7a:09:03:f8:96:57:9f:cd:d4:3c:
                    69:44:42:7a:ef
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:ED:B4:A0:33:6A:1B:08:91:B6:BD:FA:41:92:BD:9A:AB:AB:63:F4:53

            X509v3 Subject Key Identifier: 
                3B:C1:2C:E0:B5:BC:71:D0:2C:5F:D6:08:D5:85:2D:12:05:0C:D7:20
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.79
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://GEANT.crl.sectigo.com/GEANTOVECCCA4.crl

            Authority Information Access: 
                CA Issuers - URI:http://GEANT.crt.sectigo.com/GEANTOVECCCA4.crt
                OCSP - URI:http://GEANT.ocsp.sectigo.com

            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : AD:F7:BE:FA:7C:FF:10:C8:8B:9D:3D:9C:1E:3E:18:6A:
                                B4:67:29:5D:CF:B1:0C:24:CA:85:86:34:EB:DC:82:8A
                    Timestamp : Oct 11 09:24:44.503 2022 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:22:88:A8:6D:05:E2:1F:EB:26:81:31:F5:
                                59:57:DC:33:6A:18:D8:B3:51:C6:79:73:8A:D9:EA:83:
                                5A:0D:3E:12:02:20:47:7A:53:3F:B6:D9:9E:1E:0A:CB:
                                B4:31:5C:9F:67:F7:40:24:97:91:D9:9A:F0:14:E8:D3:
                                5F:78:5F:AA:CC:AF
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84:
                                16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52
                    Timestamp : Oct 11 09:24:44.466 2022 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C3:9D:F0:17:0C:4D:F0:EA:D0:B7:BF:
                                3D:6F:52:2B:5E:81:07:4F:89:B3:A9:D3:D4:BB:9B:B6:
                                A7:98:6F:D2:22:02:21:00:C8:FE:FB:9E:55:E4:58:94:
                                AD:5A:5C:6E:BA:48:42:41:0C:9A:4D:30:B0:B0:78:CC:
                                01:DD:A9:C4:4E:23:CE:B5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
                                03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
                    Timestamp : Oct 11 09:24:44.421 2022 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:78:EA:6C:E8:BB:20:85:14:24:AA:93:E1:
                                BA:37:49:0F:FC:20:C1:21:92:47:E8:8B:5E:18:5E:5A:
                                74:08:D7:75:02:20:50:31:F8:FE:4A:0F:C6:B9:EE:D0:
                                20:6B:12:FE:0E:93:C7:BD:E7:34:42:67:F5:E1:B7:C6:
                                D5:0B:74:BF:0D:FE
            X509v3 Subject Alternative Name: 
                DNS:aalto.fi, DNS:5g-research.aalto.fi, DNS:abe.aalto.fi, DNS:accounting.aalto.fi, DNS:acre.aalto.fi, DNS:act.aalto.fi, DNS:aef.aalto.fi, DNS:aiic.aalto.fi, DNS:alumni.aalto.fi, DNS:ani.aalto.fi, DNS:architecture.aalto.fi, DNS:artcoordination.aalto.fi, DNS:arts.aalto.fi, DNS:asci.aalto.fi, DNS:avoin.aalto.fi, DNS:batcircle.aalto.fi, DNS:beta.aalto.fi, DNS:bimforlean.aalto.fi, DNS:bio2.aalto.fi, DNS:bioeconomy.aalto.fi, DNS:biofilia.aalto.fi, DNS:biz.aalto.fi, DNS:brainscience.aalto.fi, DNS:builtenv.aalto.fi, DNS:campusmember.aalto.fi, DNS:cearctic.aalto.fi, DNS:cemat.aalto.fi, DNS:chem.aalto.fi, DNS:choicetank.aalto.fi, DNS:civileng.aalto.fi, DNS:ckir.aalto.fi, DNS:cluster2017.aalto.fi, DNS:cmat.aalto.fi, DNS:cmet.aalto.fi, DNS:comnet.aalto.fi, DNS:comp.aalto.fi, DNS:copyright.aalto.fi, DNS:cqe.aalto.fi, DNS:cs.aalto.fi, DNS:datahub.aalto.fi, DNS:ddi.aalto.fi, DNS:design.aalto.fi, DNS:digi.aalto.fi, DNS:digital.aalto.fi, DNS:economics.aalto.fi, DNS:educase.aalto.fi, DNS:eea.aalto.fi, DNS:ele.aalto.fi, DNS:elec.aalto.fi, DNS:elo.aalto.fi, DNS:energy.aalto.fi, DNS:energyscience.aalto.fi, DNS:eng.aalto.fi, DNS:facilityrental.aalto.fi, DNS:ficore.aalto.fi, DNS:fif.aalto.fi, DNS:finance.aalto.fi, DNS:globalimpact.aalto.fi, DNS:health.aalto.fi, DNS:hema.aalto.fi, DNS:hyber.aalto.fi, DNS:icetank.aalto.fi, DNS:information.aalto.fi, DNS:innovation.aalto.fi, DNS:inside.aalto.fi, DNS:it.aalto.fi, DNS:lifewidelearning.aalto.fi, DNS:living.aalto.fi, DNS:lounasmaalab.aalto.fi, DNS:ltl.aalto.fi, DNS:ltq.aalto.fi, DNS:luma.aalto.fi, DNS:lwl.aalto.fi, DNS:management.aalto.fi, DNS:marketing.aalto.fi, DNS:materials.aalto.fi, DNS:mechatronics.aalto.fi, DNS:mecheng.aalto.fi, DNS:media.aalto.fi, DNS:medialab.aalto.fi, DNS:metsahovi.aalto.fi, DNS:nbe.aalto.fi, DNS:nmc.aalto.fi, DNS:npharvest.aalto.fi, DNS:openaccess.aalto.fi, DNS:otanano.aalto.fi, DNS:ourblogs.aalto.fi, DNS:pati.aalto.fi, DNS:physics.aalto.fi, DNS:promootio.aalto.fi, DNS:rawmaterials.aalto.fi, DNS:sci.aalto.fi, DNS:sem.aalto.fi, DNS:shakinguptech.aalto.fi, DNS:spa.aalto.fi, DNS:spacecraft.aalto.fi, DNS:startupcenter.aalto.fi, DNS:taide.aalto.fi, DNS:test.content.aalto.fi, DNS:test.datahub.aalto.fi, DNS:test.lifewidelearning.aalto.fi, DNS:test.ourblogs.aalto.fi, DNS:tuta.aalto.fi, DNS:uwas.aalto.fi, DNS:virtualexhibitions.aalto.fi, DNS:www.aalto.fi
    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:21:00:87:5c:ed:43:cf:5e:04:d7:63:b3:c3:d4:91:
         92:e2:75:8e:9e:ee:ef:58:32:33:e2:5f:27:c3:53:04:8f:4f:
         a1:02:20:5f:f7:b7:4e:5b:8d:51:83:04:a2:3c:98:22:0b:03:
         da:76:d4:f1:77:58:bf:85:4b:cb:1b:8f:19:ef:53:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----