pre-inloggen-digid.achmea.nl

- Achmea Interne Diensten N.V. -

Issued by QuoVadis CSP - PKI Overheid CA - G2

About this certificate

This digital certificate with serial number 79:9c:15:b4:a4:87:a6:1e:89:28:2a:1a:f8:5d:a0:33:ec:bf:71:1a was issued on by QuoVadis Trustlink BV.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Achmea Interne Diensten N.V.

Company registration number: 00000003301249270000
Organization: Achmea Interne Diensten N.V.
Organization unit: System Operations
State / Province: Utrecht
Locality: Zeist
Country: NL

QuoVadis Trustlink BV

Organization: QuoVadis Trustlink BV
Organization unit: Issuing Certification Authority
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 79:9c:15:b4:a4:87:a6:1e:89:28:2a:1a:f8:5d:a0:33:ec:bf:71:1a
Serial Number (int): 694268690348183693060308472479917281911764906266
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 66:08:dd:49:0d:e8:a1:19:e0:85:96:98:68:45:65:7c:13:ba:12:71
AuthorityKeyId: 69:cb:7f:50:76:00:86:53:95:79:12:c1:58:76:1f:13:ef:f2:4d:a3

Fingerprint (sha1): 99:20:c1:cd:f9:98:47:7d:de:37:f6:dd:ff:5c:0d:30:db:7c:05:3d
Fingerprint (sha256): 00:69:fd:1c:76:28:93:53:2f:9a:33:50:e6:d6:06:c8:40:44:7a:bd:97:2a:d1:76:99:b8:14:2a:e1:a2:f6:30

Issuing Certificate URL: http://trust.quovadisglobal.com/qvocag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvocag2.crl

Check the revocation status for certificate pre-inloggen-digid.achmea.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pre-inloggen-digid.achmea.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pre-inloggen-digid.achmea.nl

Other certificates including the domain name achmea.nl

(limited to 100 certificates)
detijdvooruit.achmea.nl
pre-inloggen-digid.achmea.nl
FTP.ACCP.achmea.nl
detijdvooruit.achmea.nl
bcn-poc.achmea.nl
mo-fed.achmea.nl
anderskijken.achmea.nl
pre-inloggen.achmea.nl
verkeersschade.achmea.nl
evenement.achmea.nl
acc.login.pensioenportaalentrance.achmea.nl
inloggen-abzdp.achmea.nl
testvision.achmea.nl
mobilerelay.achmea.nl
hybridsmtp.achmea.nl
nieuws.achmea.nl
test.webservices.achmea.nl
pensioenservice.achmea.nl
achmea.brandportal.achmea.nl
*.it.achmea.nl
news.achmea.nl
ucofw01.achmea.nl
zorgkeuze.achmea.nl
mda.achmea.nl
reputatiemanager.achmea.nl
iontw.achmea.nl
pensioenportaalentrance.achmea.nl
tst.tis.6.achmea.nl
prd-sitecorexc.schadeportaal.achmea.nl
acc.cm.schadeportaal.achmea.nl
api.leven.achmea.nl
acc.login.pensioenportaalentrance.achmea.nl
1.mig.cm.achmea.nl
e.achmea.nl
asd301.achmea.nl
onderweg2.achmea.nl
www.huisstijlwijzer.defriesland.communicatieshop.achmea.nl
acc-secure-azure.zorgzoeker.achmea.nl
acc-api.leven.achmea.nl
go.springest.achmea.nl
acc-mob.achmea.nl
nieuwsbriefduurzaamheid.achmea.nl
reputatiemanager.achmea.nl
p-alerting-achmeadpm.achmea.nl
investmentupdates.realestate-mortgages.achmea.nl
prd-sitecorexc.achmea.nl
inloggen-cert.achmea.nl
prd-wwwmijnlevenaveroachmea.nl-sitecorexc.achmea.nl
acc-averoachmeaonline.intranet.achmea.nl
ucaccess02.achmea.nl
tst-b2b-client-api.achmea.nl
acc-b2b-api.achmea.nl
nieuws.achmea.nl
acc.cm.gezondheidsverklaring.achmea.nl
f.onderzoek.achmea.nl
acc-b2b-api.achmea.nl
Achmea Interne Diensten N.V.
link.achmea.nl
zorgzoeker.achmea.nl
tst-b2b-api.achmea.nl
DP-LOONH-KEBV.achmea.nl
www.verzekeringservice.achmea.nl
verkeersschade.achmea.nl
woontest.achmea.nl
tis.7.achmea.nl
acc-secure-azure.zzcms.achmea.nl
onderweg2.achmea.nl
www.pensioenonline.achmea.nl
filerelay.test.achmea.nl
seni-sfs.achmea.nl
asd301.achmea.nl
acc-api.schadeinkomen.achmea.nl
ucaccess01.achmea.nl
tis.5.achmea.nl
api.schadeinkomen.achmea.nl
schadeportaal.achmea.nl
zorg-sfs.achmea.nl
prd-sitecorexc.achmea.nl
nieuwsbriefduurzaamheid.achmea.nl
schadeportaal.achmea.nl
acc-www.pensioenonline.achmea.nl
news.achmea.nl
www.verzekeringservice.achmea.nl
acc-secure-azure.zorgzoeker.achmea.nl
mob.achmea.nl
prd-sitecorexc.achmea.nl
prd-idin-bridge-signing-cert.achmea.nl
www.pensioenonline.achmea.nl
sapjamwidget.achmea.nl
acc.averoachmeaonline.intranet.achmea.nl
www.achmea.nl
smtprelay-nl2.achmea.nl
f.onderzoek.achmea.nl
schadeportaal.achmea.nl
acc-b2b-api.achmea.nl
attenties.achmea.nl
veilingenvankunst.achmea.nl
pensioenservice.achmea.nl
tis.ing.1.achmea.nl
prd-sitecorexc.schadeportaal.achmea.nl

Certificate

The complete raw certificate details for pre-inloggen-digid.achmea.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHWzCCBUOgAwIBAgIUeZwVtKSHph6JKCoa+F2gM+y/cRowDQYJKoZIhvcNAQEL
BQAwgYUxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVRdW9WYWRpcyBUcnVzdGxpbmsg
QlYxKDAmBgNVBAsMH0lzc3VpbmcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxLDAq
BgNVBAMMI1F1b1ZhZGlzIENTUCAtIFBLSSBPdmVyaGVpZCBDQSAtIEcyMB4XDTE3
MDYxNTA4NDU1OFoXDTE4MDYxNTAwMDAwMFowgbgxHTAbBgNVBAUTFDAwMDAwMDAz
MzAxMjQ5MjcwMDAwMQswCQYDVQQGEwJOTDEQMA4GA1UECAwHVXRyZWNodDEOMAwG
A1UEBwwFWmVpc3QxJTAjBgNVBAoMHEFjaG1lYSBJbnRlcm5lIERpZW5zdGVuIE4u
Vi4xGjAYBgNVBAsMEVN5c3RlbSBPcGVyYXRpb25zMSUwIwYDVQQDDBxwcmUtaW5s
b2dnZW4tZGlnaWQuYWNobWVhLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4objsrl4kLyBEte1LUAt+Px0dZQ/Xs1USOLpbSKk8vs+clm761zandN9
uPgGhU4a1mCE4VdWaQJgapuY+ygq8F1tMvhcWZ/kfBTOcHS0nfeLkBTNrgEMfzPW
H0SDONDvRcy+Y3dZWPMPv1CoCNfg3+rC+AY0wIKJzcTd7BckqExxw4dpsqC7WNFl
w+r4XHbucFKbsgQEqJFhY4N+/VLQc2+I/hGzucGR10kt+D8w4wajJGkNpCkbmcEc
hiDH1yG2ts4Bu1wP7CPodyLu11eJ/xQcesJh5ucyMulLzr2YteE1DkP3k25rPgdz
Q8+qBtO12sXYGEFsjRJz5pVVrQLCXQIDAQABo4ICjDCCAogwcwYIKwYBBQUHAQEE
ZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29t
L3F2b2NhZzIuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2ds
b2JhbC5jb20wHQYDVR0OBBYEFGYI3UkN6KEZ4IWWmGhFZXwTuhJxMB8GA1UdIwQY
MBaAFGnLf1B2AIZTlXkSwVh2HxPv8k2jMIIBOwYDVR0gBIIBMjCCAS4wggEgBgpg
hBABh2sBAgUGMIIBEDA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5xdW92YWRpc2ds
b2JhbC5jb20vcmVwb3NpdG9yeTCB1wYIKwYBBQUHAgIwgcoMgcdSZWxpYW5jZSBv
biB0aGlzIGNlcnRpZmljYXRlIGJ5IGFueSBwYXJ0eSBhc3N1bWVzIGFjY2VwdGFu
Y2Ugb2YgdGhlIHJlbGV2YW50IFF1b1ZhZGlzIENlcnRpZmljYXRpb24gUHJhY3Rp
Y2UgU3RhdGVtZW50IGFuZCBvdGhlciBkb2N1bWVudHMgaW4gdGhlIFF1b1ZhZGlz
IHJlcG9zaXRvcnkgIChodHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbSkuMAgG
BmeBDAECAjA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xv
YmFsLmNvbS9xdm9jYWcyLmNybDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwIGCCsGAQUFBwMBMCcGA1UdEQQgMB6CHHByZS1pbmxvZ2dlbi1kaWdp
ZC5hY2htZWEubmwwDQYJKoZIhvcNAQELBQADggIBAG68ilK9KcCSuuHKPOi2GFEM
cETvcdUyEPxRqn8khJGLRo8Rz3A1qnX1Z2rhh+KhaYNjwjqH5MPQrv6obw0+gjfq
iwNYHpGSNAbv+WEwenU3KZP/uUuFJJHA6WkLPBl0osco21YDxC4/c1La08SXaUpu
uJXmxu/qWqqBoQXnRLhKgABICG+xuNXrgxnYAgQp9nL4JQnaHdgKKoNoA5+rI87s
/armZYQH5Jch+elkrasYkahtdOxZb/l35mENhn6fS9PBkIBnkPSuCmchTUztzqTa
I+IBv7m6H+cF2yJBICdrlabOboTDuHH4l3cn0vkk+iDK6fv+9SfH1IachrPC9DD6
V1Tjqp8OIZrbqHLLNXoDoSzNjJ+VndlDuxZDHkmPkq5DgwQHXWI1zB10Dfo9sN+Y
sHmoyozjEqoqv09RzUCUhc+ocrZ5Q4iNQAHaUnhNc7Rb9c4WIAoTQ+ixcyhZLMmS
ECjvzLq/H1oWc+l+s5cJikUvvQDNyOeLaeyQNj79VxsZD1JfKFeE86cwWA4fd82L
LzQX2a9Rt43NWPJNeIZtOa3SqM5B+3Lalm1pIIbPI41v0+BE6XBKzqDLVWBb4Mtj
56kh28bxXDR+k4FM2duzmn8to7M5A8uyO562t5Ssc/gTaM9tOENnQb2HJIBq+x4f
ku+EnnovntUCKJcIaphk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4objsrl4kLyBEte1LUAt
+Px0dZQ/Xs1USOLpbSKk8vs+clm761zandN9uPgGhU4a1mCE4VdWaQJgapuY+ygq
8F1tMvhcWZ/kfBTOcHS0nfeLkBTNrgEMfzPWH0SDONDvRcy+Y3dZWPMPv1CoCNfg
3+rC+AY0wIKJzcTd7BckqExxw4dpsqC7WNFlw+r4XHbucFKbsgQEqJFhY4N+/VLQ
c2+I/hGzucGR10kt+D8w4wajJGkNpCkbmcEchiDH1yG2ts4Bu1wP7CPodyLu11eJ
/xQcesJh5ucyMulLzr2YteE1DkP3k25rPgdzQ8+qBtO12sXYGEFsjRJz5pVVrQLC
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 694268690348183693060308472479917281911764906266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Issuing Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis CSP - PKI Overheid CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-15 08:45:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-15 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003301249270000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zeist'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Achmea Interne Diensten N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'System Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pre-inloggen-digid.achmea.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28596373387190037378382720020286358659276125794529174939387006499856023205517496081522638014268785750546354553531354000273889204524716558894460479139853048827763267432342115014871203650148733187323073587980048478345742633766878644831674479199321345083186732296767265439804286889571021159860266161108939634970731370571862838202120770240507993460478485231365903892373790518333821013954318755089984339088179192977898494693407400339836789069457335258274388786318378409285769022412135023210009326264026637689983844251805827376383733071733951716925645320981689959741215551738631243971941024149373769418841014814722419245661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvocag2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6608dd490de8a119e08596986845657c13ba1271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 69cb7f5076008653957912c158761f13eff24da3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (306 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository  (http://www.quovadisglobal.com).'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvocag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-inloggen-digid.achmea.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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