jabber.staatsbosbeheer.nl
- Staatsbosbeheer -
Issued by Thawte TLS RSA CA G1
About this certificate
This digital certificate with serial number 05:75:a3:27:e6:c0:85:dd:eb:24:9b:9b:fa:18:e0:62 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Staatsbosbeheer
Organization:
Staatsbosbeheer
Organization unit: BackOffice ICT
Organization unit: BackOffice ICT
Locality:
Amersfoort
Country: NL
Country: NL
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:75:a3:27:e6:c0:85:dd:eb:24:9b:9b:fa:18:e0:62Serial Number (int): 7256947905451185660337248275254534242
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 1f:25:49:79:9e:33:33:09:35:22:17:ba:f3:56:f7:a3:58:c9:24:d9
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7
Fingerprint (sha1): 52:9b:fc:64:66:a8:6a:ea:e3:51:7f:67:02:6e:b5:ba:c3:69:75:74
Fingerprint (sha256): 00:20:6a:91:c0:6d:79:e8:ec:75:c2:cb:7e:23:ea:9c:24:38:84:fb:9d:5a:23:a2:94:f8:4e:30:17:7d:e7:ac
Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl
Check the revocation status for certificate jabber.staatsbosbeheer.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jabber.staatsbosbeheer.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jabber.staatsbosbeheer.nl
staatsbosbeheer.nl
staatsbosbeheer.nl
Other certificates including the domain name staatsbosbeheer.nl
(limited to 100 certificates)
jabber.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
www.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
tunnel.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.ambuj.tech
hermes.thegodschallenge.com
cdn.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
eas.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
mx.staatsbosbeheer.nl
www.ambuj.tech
clicks.w.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
SBB10VS010V.staatsbosbeheer.nl
xn--trimtch-198d.ml
vrijwilligers.staatsbosbeheer.nl
werkenbij.staatsbosbeheer.nl
marketplace.hashcove.com
webclient.staatsbosbeheer.nl
SBB10UX010V.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
line-dev.onedee.ai
vpn.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
www.yowai.band
embedkaart.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
www.m-rental.co
w.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
wallboard.apps.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
app.scrollytelling.io
elswout.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
scrollytelling-2018-436854.c66.me
www.winkel.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
altiris.apps.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
covid19reports.app
mx.staatsbosbeheer.nl
app.scrollytelling.io
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
carsonbook.carsonh.com
www.bluebeak.ai
vrijwilligers.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
sbb10vm010v-ms.staatsbosbeheer.nl
groenalliantie.staatsbosbeheer.nl
merkportaal.staatsbosbeheer.nl
*.staatsbosbeheer.nl
millingerwaard.staatsbosbeheer.nl
sbb10im010v-ms.staatsbosbeheer.nl
www.npiapi.com
kaart.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
betalen.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
sbb10vs010v.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
eric.smyth.app
cdn.staatsbosbeheer.nl
elswout.staatsbosbeheer.nl
vpnwolk.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
embedkaart.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
webclient.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
www.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
tunnel.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.ambuj.tech
hermes.thegodschallenge.com
cdn.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
eas.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
mx.staatsbosbeheer.nl
www.ambuj.tech
clicks.w.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
SBB10VS010V.staatsbosbeheer.nl
xn--trimtch-198d.ml
vrijwilligers.staatsbosbeheer.nl
werkenbij.staatsbosbeheer.nl
marketplace.hashcove.com
webclient.staatsbosbeheer.nl
SBB10UX010V.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
line-dev.onedee.ai
vpn.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
www.yowai.band
embedkaart.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
www.m-rental.co
w.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
wallboard.apps.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
app.scrollytelling.io
elswout.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
scrollytelling-2018-436854.c66.me
www.winkel.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
altiris.apps.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
covid19reports.app
mx.staatsbosbeheer.nl
app.scrollytelling.io
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
carsonbook.carsonh.com
www.bluebeak.ai
vrijwilligers.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
sbb10vm010v-ms.staatsbosbeheer.nl
groenalliantie.staatsbosbeheer.nl
merkportaal.staatsbosbeheer.nl
*.staatsbosbeheer.nl
millingerwaard.staatsbosbeheer.nl
sbb10im010v-ms.staatsbosbeheer.nl
www.npiapi.com
kaart.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
betalen.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
sbb10vs010v.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
eric.smyth.app
cdn.staatsbosbeheer.nl
elswout.staatsbosbeheer.nl
vpnwolk.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
embedkaart.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
webclient.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
Certificate
The complete raw certificate details for jabber.staatsbosbeheer.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIQBXWjJ+bAhd3rJJub+hjgYjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0xODAyMjYwMDAwMDBaFw0xODEyMjAxMjAwMDBaMHkxCzAJBgNVBAYTAk5MMRMw EQYDVQQHEwpBbWVyc2Zvb3J0MRgwFgYDVQQKEw9TdGFhdHNib3NiZWhlZXIxFzAV BgNVBAsTDkJhY2tPZmZpY2UgSUNUMSIwIAYDVQQDExlqYWJiZXIuc3RhYXRzYm9z YmVoZWVyLm5sMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqyfymFkO kNYoD102/A173KmHL/xZLVahMzdt2iDxDZQkIs4ocnDdgpF9KRvyfwLpKNvEH6JR FDdLelQMR+525OjDwn+dEc8Ot31EdNe+N03yI7hHMBErbImf0fBdbjwN9ZB4FgaA vRHFeARad1fbTfu3h7q8VPKsKFEoMen0PhIsepKg+K9coWDdkDz1+jYt4KbeTIyn Zn+QAhH2YVP9lfUMMpzltuRKIKq0My6GlV0rqWYZfrn1utLjEEUckcWcbVtIb0jp qw6BtKL41aWDmixRTgkywuDIHCk2raU8ozhf7JAEQlPzxDFgsQWpY4C02RbHT0Ij 5qQMsMJek8LUii7IMdKeliW6kuMy3t9joVdVxBpp2r1Kuyt/fy/xEEgIZCX7ZWTS Dq0Rcy7sHp3kB0T8//GcrCAilvwTtGDdJzXtLNDprRinT4XXoX+JAkDxaUHL1KTF bzy3y+87pNSRSJoUfFAmBkjIaHRbOBPHTyP4l1qTJ0AUzsXrAL9a3dySEWfUIBg6 OCuFk75Tmhh7Y+W8zw9sJJMVJwnJOqs6CgMKk6CrzWtcjFHTzvfkGLRGgpBd/S1e eyim1WdwksCPfA8oyTgbq7VuQH2oeTb8x1fxoM3sJAdpst44ejnFA+jrrz9MFDgE +1Ql3myJSCXg9NKCfxeBH5NteOV10xdU3X8CAwEAAaOCAr0wggK5MB8GA1UdIwQY MBaAFKWM/jLM6w8s1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBQfJUl5njMzCTUiF7rz VvejWMkk2TA4BgNVHREEMTAvghlqYWJiZXIuc3RhYXRzYm9zYmVoZWVyLm5sghJz dGFhdHNib3NiZWhlZXIubmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY2RwLnRo YXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcmwwTAYDVR0gBEUwQzA3BglghkgB hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzAIBgZngQwBAgIwcAYIKwYBBQUHAQEEZDBiMCQGCCsGAQUFBzABhhhodHRwOi8v c3RhdHVzLnRoYXd0ZS5jb20wOgYIKwYBBQUHMAKGLmh0dHA6Ly9jYWNlcnRzLnRo YXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcnQwCQYDVR0TBAIwADCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I DdwQAAABYdE1T8sAAAQDAEgwRgIhAOz1nHOcq9w2ztLZTj4VJsaGdNPEo+AW3dlA BMEcQVwUAiEAhxUWLKGgYuJYh5GO9EoUjt73Z4FvmKVhUZpyCCNmeI4AdQCHdb/n WXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWHRNVBoAAAEAwBGMEQCICO7 ncf62/Zt/0ynMP04LIK8sOQNvILE3m4xFdFoor2dAiBQdfrDF/3MGeevytAhy4dH h/yPwhDtvnS9jf4nlythzzANBgkqhkiG9w0BAQsFAAOCAQEANyahcTxnuENpvEzq TCU4WOK1WM3hfENeZHpksKDGNSGgisyFbHP4N0bS+ay6ZbP2gjHS6dxEQt2US3nm wLb6S3T+t6KicLQNZNthYdOg2tif4R0KEZl7Xgy0ra5MIlqtB11svlld8rNBuhKq nc+LUR03PQd4XM/OvW+KbMbNWxMMGHjOnXcrOazlzw9Vsk4fK3s3Bx4JXI0A+m6N AF/CEgA1HV5sxIdLXhychbKPUQpy6Ws1RnVlds/iUqumYY5EXEJ87rNmvdXXyL8R oemjvwuuFhrJrLwPwo0z9EOsOcQ3W0KUqzaKKvhNWEJgMLcYb214U1PMbHN7O3RY s6Lfbg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqyfymFkOkNYoD102/A17 3KmHL/xZLVahMzdt2iDxDZQkIs4ocnDdgpF9KRvyfwLpKNvEH6JRFDdLelQMR+52 5OjDwn+dEc8Ot31EdNe+N03yI7hHMBErbImf0fBdbjwN9ZB4FgaAvRHFeARad1fb Tfu3h7q8VPKsKFEoMen0PhIsepKg+K9coWDdkDz1+jYt4KbeTIynZn+QAhH2YVP9 lfUMMpzltuRKIKq0My6GlV0rqWYZfrn1utLjEEUckcWcbVtIb0jpqw6BtKL41aWD mixRTgkywuDIHCk2raU8ozhf7JAEQlPzxDFgsQWpY4C02RbHT0Ij5qQMsMJek8LU ii7IMdKeliW6kuMy3t9joVdVxBpp2r1Kuyt/fy/xEEgIZCX7ZWTSDq0Rcy7sHp3k B0T8//GcrCAilvwTtGDdJzXtLNDprRinT4XXoX+JAkDxaUHL1KTFbzy3y+87pNSR SJoUfFAmBkjIaHRbOBPHTyP4l1qTJ0AUzsXrAL9a3dySEWfUIBg6OCuFk75Tmhh7 Y+W8zw9sJJMVJwnJOqs6CgMKk6CrzWtcjFHTzvfkGLRGgpBd/S1eeyim1WdwksCP fA8oyTgbq7VuQH2oeTb8x1fxoM3sJAdpst44ejnFA+jrrz9MFDgE+1Ql3myJSCXg 9NKCfxeBH5NteOV10xdU3X8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7256947905451185660337248275254534242 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amersfoort' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Staatsbosbeheer' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BackOffice ICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jabber.staatsbosbeheer.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698255745556857808704936841354088878641336457001814602522841970719068031879931169117986699613912125808144174560867002289328243095505513017727958339977896314340707334780122893616165774520489371722225070765699810561410209274741289957194919205026782407360058869769613692230264303450276002753527647908106894627032454371913135512575798506532990175044943043589872509209986447837712732284851521949641805246985747953596404728131914834222266952905482052934485762468958513575663236987093795782096141029676594255178188619727754302202341818463977007973462722668463379400061222465450495272637092350478295393629289979871377020147001145893048354568264050149936743936168187537137902635073688811897628446470057288293654365996128609333703979321092730289303118188766956135244980548047099207069257044478128131697233277046662080738773056435409709614430872802729950974474404032406748857526740125689556473683801105348965967944572441784068606682005414743766002683414929267770332275883909179469705103531766835847409789040441901735341549326005421519011076060068009390958392450680415622459286082388597837619638977149096006076006380415267819960126808431686851655835100206832833790805732972570126383444425170989695992046797511410930713127631006198764145382579583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1f2549799e333309352217baf356f7a358c924d9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabber.staatsbosbeheer.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staatsbosbeheer.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000161d1354fcb0000040300483046022100ecf59c739cabdc36ced2d94e3e1526c68674d3c4a3e016ddd94004c11c415c140221008715162ca1a062e25887918ef44a148edef767816f98a561519a72082366788e0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000161d13550680000040300463044022023bb9dc7fadbf66dff4ca730fd382c82bcb0e40dbc82c4de6e3115d168a2bd9d02205075fac317fdcc19e7afcad021cb874787fc8fc210edbe74bd8dfe27972b61cf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003726a1713c67b84369bc4cea4c253858e2b558cde17c435e647a64b0a0c63521a08acc856c73f83746d2f9acba65b3f68231d2e9dc4442dd944b79e6c0b6fa4b74feb7a2a270b40d64db6161d3a0dad89fe11d0a11997b5e0cb4adae4c225aad075d6cbe595df2b341ba12aa9dcf8b511d373d07785ccfcebd6f8a6cc6cd5b130c1878ce9d772b39ace5cf0f55b24e1f2b7b37071e095c8d00fa6e8d005fc21200351d5e6cc4874b5e1c9c85b28f510a72e96b3546756576cfe252aba6618e445c427ceeb366bdd5d7c8bf11a1e9a3bf0bae161ac9acbc0fc28d33f443ac39c4375b4294ab368a2af84d58426030b7186f6d785353cc6c737b3b7458b3a2df6e