www.greetz.nl
- Greetz B.V. -
Issued by StartCom Extended Validation Server CA
About this certificate
This digital certificate with serial number 56:cd:b3:90:bf:03:4c:52:45:3e:d9:8d:77:65:e4:0d was issued on by StartCom Ltd..
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Greetz B.V.
Company registration number:
34312893
Organization: Greetz B.V.
Organization: Greetz B.V.
Address:
Willem Fenengastraat 17
Postal code: 1096 BL
State / Province: North Holland
Locality: Amsterdam
Country: NL
Postal code: 1096 BL
State / Province: North Holland
Locality: Amsterdam
Country: NL
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 56:cd:b3:90:bf:03:4c:52:45:3e:d9:8d:77:65:e4:0dSerial Number (int): 115381670512792484507457787749875442701
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 7f:b8:2a:95:18:24:c3:d3:47:8a:79:4f:0d:04:1a:29:a0:ae:98:17
AuthorityKeyId: a1:e1:9e:45:25:79:4d:06:d9:02:17:92:82:d5:30:89:72:25:14:a0
Fingerprint (sha1): 4e:d6:bf:90:44:1d:4c:71:ee:a6:15:9e:c8:ae:6d:3d:d6:58:f9:56
Fingerprint (sha256): 88:91:5e:a9:1d:49:25:60:fc:03:df:8a:cf:70:2f:7a:4f:26:c4:38:2c:42:89:02:d5:df:9c:52:82:64:41:27
Issuing Certificate URL: http://aia.startssl.com/certs/sub.class4.server.ca.crt
Revocation information
OCSP Server: http://ocsp.startssl.com/sub/class4/server/caCRL Distribution Point: http://crl.startssl.com/crt4-crl.crl
Check the revocation status for certificate www.greetz.nl
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.greetz.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Key Agreement
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.greetz.nl
greetz.nl
greetz.be
www.greetz.be
static.greetz.nl
static.greetz.be
greetz.nl
greetz.be
www.greetz.be
static.greetz.nl
static.greetz.be
Other certificates including the domain name greetz.nl
(limited to 100 certificates)
klantenservice.greetz.nl
upgrade.greetz.nl
betalingen.greetz.nl
greetz.nl
e.greetz.nl
betalingen.greetz.nl
sni.cloudflaressl.com
e.greetz.nl
sorry.greetz.nl
e.greetz.nl
greetz.be
bpph.greetz.nl
moonpig.careers
moonpig.careers
upgrade.greetz.nl
api.prod.greetz-nl.net
upgrade.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
upgrade.greetz.nl
www.greetz.nl
upgrade.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
betalingen.greetz.nl
upgrade.greetz.nl
es.greetz.nl
klantenservice.greetz.nl
e.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
sni.cloudflaressl.com
es.greetz.nl
klantenservice.greetz.nl
es.greetz.nl
*.greetz.nl
sni.cloudflaressl.com
upgrade.greetz.nl
e.greetz.nl
klantenservice.greetz.nl
ghdlry.greetz.nl
betalingen.greetz.nl
e.greetz.nl
moonpig.careers
e.greetz.nl
*.greetz.nl
upgrade.greetz.nl
www.greetz.nl
*.greetz.nl
klantenservice.greetz.nl
venspro.com
www.greetz.nl
api.uat.greetz-nl.net
klantenservice.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
klantenservice.greetz.nl
*.greetz.nl
moonpig.careers
upgrade.greetz.nl
upgrade.greetz.nl
moonpig.careers
klantenservice.greetz.nl
klantenservice.greetz.nl
www.greetz.nl
e.greetz.nl
api.dev.greetz-nl.net
e.greetz.nl
upgrade.greetz.nl
www.greetz.nl
betalingen.greetz.nl
greetz.nl
greetz.nl
sni.cloudflaressl.com
klantenservice.greetz.nl
betalingen.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
www.greetz.nl
e.greetz.nl
e.greetz.nl
upgrade.greetz.nl
api.prod.greetz-nl.net
klantenservice.greetz.nl
greetz.nl
ghdlry.greetz.nl
es.greetz.nl
e.greetz.nl
upgrade.greetz.nl
ghdlry.greetz.nl
api.prod.greetz-nl.net
klantenservice.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
e.greetz.nl
betalingen.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
upgrade.greetz.nl
betalingen.greetz.nl
greetz.nl
e.greetz.nl
betalingen.greetz.nl
sni.cloudflaressl.com
e.greetz.nl
sorry.greetz.nl
e.greetz.nl
greetz.be
bpph.greetz.nl
moonpig.careers
moonpig.careers
upgrade.greetz.nl
api.prod.greetz-nl.net
upgrade.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
upgrade.greetz.nl
www.greetz.nl
upgrade.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
betalingen.greetz.nl
upgrade.greetz.nl
es.greetz.nl
klantenservice.greetz.nl
e.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
sni.cloudflaressl.com
es.greetz.nl
klantenservice.greetz.nl
es.greetz.nl
*.greetz.nl
sni.cloudflaressl.com
upgrade.greetz.nl
e.greetz.nl
klantenservice.greetz.nl
ghdlry.greetz.nl
betalingen.greetz.nl
e.greetz.nl
moonpig.careers
e.greetz.nl
*.greetz.nl
upgrade.greetz.nl
www.greetz.nl
*.greetz.nl
klantenservice.greetz.nl
venspro.com
www.greetz.nl
api.uat.greetz-nl.net
klantenservice.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
klantenservice.greetz.nl
*.greetz.nl
moonpig.careers
upgrade.greetz.nl
upgrade.greetz.nl
moonpig.careers
klantenservice.greetz.nl
klantenservice.greetz.nl
www.greetz.nl
e.greetz.nl
api.dev.greetz-nl.net
e.greetz.nl
upgrade.greetz.nl
www.greetz.nl
betalingen.greetz.nl
greetz.nl
greetz.nl
sni.cloudflaressl.com
klantenservice.greetz.nl
betalingen.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
www.greetz.nl
e.greetz.nl
e.greetz.nl
upgrade.greetz.nl
api.prod.greetz-nl.net
klantenservice.greetz.nl
greetz.nl
ghdlry.greetz.nl
es.greetz.nl
e.greetz.nl
upgrade.greetz.nl
ghdlry.greetz.nl
api.prod.greetz-nl.net
klantenservice.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
e.greetz.nl
betalingen.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
Certificate
The complete raw certificate details for www.greetz.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJADCCB+igAwIBAgIQVs2zkL8DTFJFPtmNd2XkDTANBgkqhkiG9w0BAQsFADCB gTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsT IFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MS8wLQYDVQQDEyZTdGFy dENvbSBFeHRlbmRlZCBWYWxpZGF0aW9uIFNlcnZlciBDQTAeFw0xNjAxMDMwMTA5 MDdaFw0xNzA4MDMwMTA5MDdaMIIBAzETMBEGCysGAQQBgjc8AgEDDAJOTDEdMBsG A1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xETAPBgNVBAUTCDM0MzEyODkzMQsw CQYDVQQGEwJOTDEWMBQGA1UECAwNTm9ydGggSG9sbGFuZDESMBAGA1UEBwwJQW1z dGVyZGFtMRAwDgYDVQQRDAcxMDk2IEJMMSAwHgYDVQQJDBdXaWxsZW0gRmVuZW5n YXN0cmFhdCAxNzEUMBIGA1UECgwLR3JlZXR6IEIuVi4xHzAdBgkqhkiG9w0BCQEW EGFkbWluQGdyZWV0ei5jb20xFjAUBgNVBAMMDXd3dy5ncmVldHoubmwwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IsMrRXax/ogLTwVihQT65JlH/WsT nLvZpSOFJUd3CHrHJu4cJn9lV39MaDAZWtziF6OcDXyFxmi18BfTIaFcQI/81lUR pm66dMJy3xyCoqEq2kAcRfFECh7cEUHdYNQljxNTfMSlefLd5ZxQxChPAVjMQGPu 3s2whd2LurZ+y4KN6XrrQ+1SXBt3GAOYgw7uayvYqG99ebwPN5CbxbBERTrFW+BG IMoEmgflRCJZc6/uke7pxVJxScnLFe6/icgw0AkjGzVaJsG8lgWF8SdVvfE34J6W Rh5wcE+NpV2LT1PH6DOVaOXw7QNxkdw69JiFf2yOR8IS+Ho3Xu4a7ax7AgMBAAGj ggTtMIIE6TALBgNVHQ8EBAMCA6gwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF BwMBMAkGA1UdEwQCMAAwHQYDVR0OBBYEFH+4KpUYJMPTR4p5Tw0EGimgrpgXMB8G A1UdIwQYMBaAFKHhnkUleU0G2QIXkoLVMIlyJRSgMIGOBggrBgEFBQcBAQSBgTB/ MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNz NC9zZXJ2ZXIvY2EwQgYIKwYBBQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wuY29t L2NlcnRzL3N1Yi5jbGFzczQuc2VydmVyLmNhLmNydDA1BgNVHR8ELjAsMCqgKKAm hiRodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9jcnQ0LWNybC5jcmwwYQYDVR0RBFow WIINd3d3LmdyZWV0ei5ubIIJZ3JlZXR6Lm5sgglncmVldHouYmWCDXd3dy5ncmVl dHouYmWCEHN0YXRpYy5ncmVldHoubmyCEHN0YXRpYy5ncmVldHouYmUwIwYDVR0S BBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMIIBmwYDVR0gBIIBkjCCAY4w CwYJKwYBBAGBtTcCMA0GCysGAQQBgbU3AQEBMIIBbgYLKwYBBAGBtTcBAgMwggFd MC4GCCsGAQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRm MDAGCCsGAQUFBwIBFiRodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9leHRlbmRlZC5w ZGYwgfgGCCsGAQUFBwICMIHrMCcWIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MAMCAQEagb9UaGlzIGNlcnRpZmljYXRlIHdhcyBpc3N1ZWQgYWNjb3Jk aW5nIHRvIHRoZSBFeHRlbmRlZCBWYWxpZGF0aW9uIHJlcXVpcmVtZW50cyBvZiB0 aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5jZSBvbmx5IGZvciB0aGUgaW50 ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSByZWx5aW5nIHBhcnR5 IG9ibGlnYXRpb25zLjCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcAzbUXm3/B wEb+6jETaj+PAC5hgvr4iW/syLL1tatgSQAAAAFSBTy0YwAABAMASDBGAiEA8PG2 /Q5pUN0TX8Fbc/c7pkc2o3g6XFT2Mzd1SBmKBX0CIQCryV/P1cH25b/pFjZL5ieh vVcvabmRwQdpBRI6vzzdxAB2AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtP T/vEAAABUgU8uL4AAAQDAEcwRQIhAIR2uwWWSfJGG0Di5Plk8CviSvQf2iTyMwHt Ij5Mj/uBAiAMZdUbHha4lIIwbLz9M8fq4A7komm6nNfcr9pBj5GgaAB2AKS5CZC0 GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABUgU8uN0AAAQDAEcwRQIhAMkL 9R+YLKNXdkR/mDC0aToNubVmPiIoirMkszSEfMk1AiBZBoB6MFSTRi6yTO3qcZDP foKMPG8/FkeI59/GKwccrDANBgkqhkiG9w0BAQsFAAOCAQEAL/FeoAuMqtrE6gbp v1qtagM8X48M0MpELSBgB1sVSafvFLZKJIStyWmHrvM9d5dxMljr4jh5pNbqgXwf S+r+YiFodNbmVdWHCrYFR64EWYspPqjpYUmZ7XSArHZwfeUf/ch+O36oEdI0Gp1M uY6r8H8ow8dzXulqGsb9A6AmL5dEiT2Myda6qOZB3LLV22Yk5GHyK10jH+ORi4t0 AW5J2H9t8uRWrMTzW83kbdJ65fyHk0ILLaSpbfThmPsdtf/u9kGKGUspxY5CMzZY BWyYwgyJ8fpCzP5Mqj4fB42Qt/3HoKqcSD0fH3Icnr7OGkYefsgcVJemS9qoUlCP TaCY3w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCLDK0V2sf6IC08FYoUE +uSZR/1rE5y72aUjhSVHdwh6xybuHCZ/ZVd/TGgwGVrc4hejnA18hcZotfAX0yGh XECP/NZVEaZuunTCct8cgqKhKtpAHEXxRAoe3BFB3WDUJY8TU3zEpXny3eWcUMQo TwFYzEBj7t7NsIXdi7q2fsuCjel660PtUlwbdxgDmIMO7msr2KhvfXm8DzeQm8Ww REU6xVvgRiDKBJoH5UQiWXOv7pHu6cVScUnJyxXuv4nIMNAJIxs1WibBvJYFhfEn Vb3xN+CelkYecHBPjaVdi09Tx+gzlWjl8O0DcZHcOvSYhX9sjkfCEvh6N17uGu2s ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 115381670512792484507457787749875442701 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-03 01:09:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-03 01:09:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '34312893' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1096 BL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Willem Fenengastraat 17' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Greetz B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.greetz.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22740036861874364959207829843577887670229160973275003834401858414400616495715686539165506693344126055065107687493327036407790094983391238409991172456321451720727145108682619591605697215486912312620454312129542579467748351060890857941314950562069664403663544769768658412921914588970443243225894499981598854353730669594924957365490854886495749851174273964600973759296443772628227107568573210906489467252558078723625522817905222389852363750166087872086560535976402093724854268082987340026577930324503818725203771890937516144718971815987644293870779259398664469678271962084015976283095112921093158871542786501555331640443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7fb82a951824c3d3478a794f0d041a29a0ae9817 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a1e19e4525794d06d902179282d53089722514a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com/sub/class4/server/ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sub.class4.server.ca.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/crt4-crl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greetz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greetz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greetz.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greetz.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.greetz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.greetz.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (402 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.1.1 (StartCom EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/extended.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'StartCom Certification Authority' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 119 97 115 32 105 115 115 117 101 100 32 97 99 99 111 114 100 105 110 103 32 116 111 32 116 104 101 32 69 120 116 101 110 100 101 100 32 86 97 108 105 100 97 116 105 111 110 32 114 101 113 117 105 114 101 109 101 110 116 115 32 111 102 32 116 104 101 32 83 116 97 114 116 67 111 109 32 67 65 32 112 111 108 105 99 121 44 32 114 101 108 105 97 110 99 101 32 111 110 108 121 32 102 111 114 32 116 104 101 32 105 110 116 101 110 100 101 100 32 112 117 114 112 111 115 101 32 105 110 32 99 111 109 112 108 105 97 110 99 101 32 111 102 32 116 104 101 32 114 101 108 121 105 110 103 32 112 97 114 116 121 32 111 98 108 105 103 97 116 105 111 110 115 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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