admin.dsh-dev.dsh.np.aws.kpn.com

- Koninklijke KPN N.V. -

Issued by KPN PKIoverheid EV CA

About this certificate

This digital certificate with serial number 43:44:5a:23:d6:8f:6c:15:f8:2c:09:f6:75:e8:80:09:fc:fb:05:7c was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Koninklijke KPN N.V.

Company registration number: 02045200
Organization: Koninklijke KPN N.V.
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 43:44:5a:23:d6:8f:6c:15:f8:2c:09:f6:75:e8:80:09:fc:fb:05:7c
Serial Number (int): 384026684619513512941866092575772910991307375996
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: a4:90:63:f9:f1:95:cb:d1:5f:a0:55:5e:ef:ab:a7:9c:c4:87:16:df
AuthorityKeyId: 80:03:85:b0:a7:63:92:df:1c:7f:5f:28:f2:5d:9d:1c:ee:bb:4c:08

Fingerprint (sha1): c5:21:f0:15:91:17:dc:ae:fe:01:42:0f:79:81:44:79:03:72:c7:93
Fingerprint (sha256): 00:ba:9e:30:e8:33:e2:10:56:91:8c:65:55:e8:f1:9a:20:f5:42:bd:b7:06:3c:ee:1a:3c:db:80:39:a0:f4:67

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNPKIoverheidEVCA.cer

Revocation information

OCSP Server: http://evocsp1.managedpki.com
CRL Distribution Point: http://evcrl1.managedpki.com/KPNPKIoverheidEVCA/LatestCRL.crl

Check the revocation status for certificate admin.dsh-dev.dsh.np.aws.kpn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.dsh-dev.dsh.np.aws.kpn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.dsh-dev.dsh.np.aws.kpn.com

Other certificates including the domain name kpn.com

(limited to 100 certificates)
sentrymail.acc.kpnnet.org
api-stg.kpn.com
shop.kpn.com
aditum.kpn.com
status.digital.kpn.com
lotte.kpn.com
*.mcmws.pmr.kpn.com
admin.dsh-dev.dsh.np.aws.kpn.com
api.cloudcontrol.kpn.com
lotteschedulee2e2-tst-new.kpn.com
*.mcmws.pmr.kpn.com
zakelijk.kpn.com
transfer-datalab.kpn.com
cordys-zm-value.kpn.com
prexdsl-c-serviceweb.kpn.com
portal.sap-hosting.kpn.com
mcpms.pmrtest.kpn.com
mosaic.generictaskservice.tst.kpn.com
*.3xoc.infrastructure-testing.np.aws.kpn.com
rt2-vlg-1.pmr.kpn.net
0122016378.StichtingKentalis.client.mvr.kpn.com
cloudkleinzakelijk.kpn.com
secure04.lithium.com
ws.kpn.com
files.cloudcontrol.kpn.com
service.kpn.com
design.kpn.com
nieuwbouwportaal.kpn.com
aditum.kpn.com
zakelijke-community.kpn.com
*.cqbmrv.infrastructure-testing.np.aws.kpn.com
b2bacc-connect-int.kpn.com
saml.eid.kpn.com
*.hwm44g.infrastructure-testing.np.aws.kpn.com
aas.tv.kpn.com
wsipuat4.kpn.com
cordys-zm-value-acc.kpn.com
account.online.kpn.com
kpnassistent.kpn.com
*.hibwy1.infrastructure-testing.np.aws.kpn.com
frea-test.kpn.com
businesspartner-ppd-s.kpn.com
*.mcmws.pmrtest.kpn.com
store.online-demo.kpn.com
inloggen.acc.kpn.com
zakelijk.kpn.com
x.acc.kpn.com
monteurstool.kpn.com
lottedev2-tst.kpn.com
login.kpn.com
*.rzr3o1.infrastructure-testing.np.aws.kpn.com
zeus-prd.kpn.com
eventgateway.acc.kpn.com
*.c6tnfz.infrastructure-testing.np.aws.kpn.com
*.nl9s.infrastructure-testing.np.aws.kpn.com
LotteSimulation.kpn.com
atvorder.kpn.com
lotte.kpn.com
uwv.portal.soc.kpn.com
serviscopeapi.kpn.com
secure08.lithium.com
vm4.kpn.com
prexdsl.kpn.com
if.auraportal.kpn.com
w5031.kpn.com
mobielbeheer.kpn.com
*.vre7br.infrastructure-testing.np.aws.kpn.com
secure08.lithium.com
*.jhlv.infrastructure-testing.np.aws.kpn.com
marketing.kpn.com
b2bpoc-connect-portal.kpn.com
b2b-portal.sympac.kpn.com
*.fiw8vk.infrastructure-testing.np.aws.kpn.com
sip.kpn.com
bpapi.kpn.com
www.kpn.com
cloudkleinzakelijk.kpn.com
mcpms.pmr.kpn.com
login.wifi.kpn.com
mosaic.generictaskservice.acc.kpn.com
b2bacc-connect-portal.kpn.com
test.kpn.com
pah1.mvr.kpn.com
ws.api.kpn.com
*.mcmws.pmrtest.kpn.com
b2bpoc-connect.kpn.com
*.prd.cdn.bcms.kpn.com
b2bacc-connect-int.kpn.com
lottee2e2-tst-new.kpn.com
LotteScheduleE2E2.tst.kpn.com
sni.kpn.com
eherkenning.kpn.com
*.prd.cdn.bcms.kpn.com
remotesupport.kpn.com
b2b-portal.sympac.kpn.com
vpnportal-internal.kpn.com
wsipprod.kpn.com
*.nghf0k.infrastructure-testing.np.aws.kpn.com
ddci.kpn.com
vcds.stb.acc.tv.kpn.com

Certificate

The complete raw certificate details for admin.dsh-dev.dsh.np.aws.kpn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIPjCCBiagAwIBAgIUQ0RaI9aPbBX4LAn2deiACfz7BXwwDQYJKoZIhvcNAQEL
BQAwQDELMAkGA1UEBhMCTkwxETAPBgNVBAoMCEtQTiBCLlYuMR4wHAYDVQQDDBVL
UE4gUEtJb3ZlcmhlaWQgRVYgQ0EwHhcNMTkxMjA1MTMxMDAxWhcNMjAxMjA0MTMx
MDAxWjCByTETMBEGCysGAQQBgjc8AgEDEwJOTDEdMBsGA1UEDwwUUHJpdmF0ZSBP
cmdhbml6YXRpb24xCzAJBgNVBAYTAk5MMRUwEwYDVQQIDAxadWlkLUhvbGxhbmQx
EjAQBgNVBAcMCVJvdHRlcmRhbTEdMBsGA1UECgwUS29uaW5rbGlqa2UgS1BOIE4u
Vi4xETAPBgNVBAUTCDAyMDQ1MjAwMSkwJwYDVQQDDCBhZG1pbi5kc2gtZGV2LmRz
aC5ucC5hd3Mua3BuLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
AMMNjByH7W9AiuTMScZqRwLzlXXEDT6SaAIybVMrbs3SPb4k66K5mUgXJmwZTds4
XcsAxERrIQtHCVDZNg9HiPGGWaKtkvIa+sxsfzdJq3XZSqXZ4V9cEFimDnDW+9h3
jNg8iSvZzMLDdjz5M1hdqo8iyKlYoUwsDKpQSRYsMxRhPtSdj71E5u4SHNi2CEXJ
R1lHilFoBdJwmh0RAW/NvQ+40PsST0VF5rOqloO1utz4oIRYwAkkleslGJJBRYsA
HKNsFZDtbv0Ix7iTqECVlpS5RIvK3HgxZ5JxHEUa5wVjD0JiUhz3L6pDVPT8Pr5+
44qMfjtr5lrhZQMugmMvVLjcr2HMwh456IFgtDo35xZS893rKTSVdHQelblz1U5t
S/7URdt5dpVfzUe93uBn6ow2lmhhVnMrrY0Sw66DX0zi0fOosgogSC/aWwyq4c+M
gwb7EVugmT4GXkte8uD7+TgQ2icb7UtWxqhEDXEPSnGbTb5xwvF9XiptQ7P8Tgrn
VDsyA3Dr7IQDQph/OeZ8tlSTvIVFxqSlzWzVPNR0c90zgecLk42O84SxdZZTZpDW
ahkpaaapMinbexVYctkciiq2+Qd68XuQy7WKkZ2nLhszEXjS6rYARjKORDzDUGnM
wwIP7zAqykhHdh8PypFMFWeCeKHRmJCU34z4joEIE/MLAgMBAAGjggKkMIICoDCB
gAYIKwYBBQUHAQEEdDByMEUGCCsGAQUFBzAChjlodHRwOi8vY2VydC5tYW5hZ2Vk
cGtpLmNvbS9DQWNlcnRzL0tQTlBLSW92ZXJoZWlkRVZDQS5jZXIwKQYIKwYBBQUH
MAGGHWh0dHA6Ly9ldm9jc3AxLm1hbmFnZWRwa2kuY29tMB0GA1UdDgQWBBSkkGP5
8ZXL0V+gVV7vq6ecxIcW3zAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFIADhbCn
Y5LfHH9fKPJdnRzuu0wIMIIBCgYDVR0gBIIBATCB/jCB8gYJYIQQAYdrAQIHMIHk
MEIGCCsGAQUFBwIBFjZodHRwczovL2NlcnRpZmljYWF0Lmtwbi5jb20vZWxla3Ry
b25pc2NoZS1vcHNsYWdwbGFhdHMwgZ0GCCsGAQUFBwICMIGQDIGNT3AgZGl0IGNl
cnRpZmljYWF0IGlzIGhldCBFViBDUFMgUEtJb3ZlcmhlaWQgdmFuIEtQTiB2YW4g
dG9lcGFzc2luZy4gVGhlIEtQTiBFeHRlbmRlZCBWYWxpZGF0aW9uIFBLSW92ZXJo
ZWlkIENQUyBhcHBsaWVzIHRvIHRoaXMgY2VydGlmaWNhdGUuMAcGBWeBDAEBME4G
A1UdHwRHMEUwQ6BBoD+GPWh0dHA6Ly9ldmNybDEubWFuYWdlZHBraS5jb20vS1BO
UEtJb3ZlcmhlaWRFVkNBL0xhdGVzdENSTC5jcmwwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATArBgNVHREEJDAigiBhZG1pbi5k
c2gtZGV2LmRzaC5ucC5hd3Mua3BuLmNvbTATBgorBgEEAdZ5AgQDAQH/BAIFADAN
BgkqhkiG9w0BAQsFAAOCAgEAWw+rixxd7E8ujrjLDscsbF4pEgWcl+WDcFII7mqe
BU9EteOqCW/X/4LWCUVFa9rywS1OAD3g0IgnprJs91dMjOM0X5AWFTfpd8NYqFVg
274yh+EyEAMzwYpy7rjRJLSVY0vMHIcq8Y6s9YIKpnVPMvhadsynBO63/K9oWcqG
5pEMf7hzlBh+aQv28IilYtDxxFMQQAbTi4ZRfH7KnFYrCumGmmgcolv3bCZ97i27
jo0HMN0nYeh5TYNsO5gWx5PiWL3H+em6AuwIrDeCQS/fBkfv9Q7iYK3J60qLKMd1
ySUkOp1jVSs0FkQvCWVK796FV2Zr9NoPocgYBJEkhezkKWPRoPg5sVCnLkwOzhci
ItsI+c3Yh51CgsVEYBjbJi7DH9DA7NlxwiJxasWabHeOqzZv6wwpNoYX+jV7aUmK
vPuL5ZMguyrpN7T8+BlQiRTfZ/RWx2bzsyPkhT3PgI8vrMnJ66+wjs6Wq3v1h7TJ
oJI1jWvFM2P5bd8NRwEYULPvfpvpoqQXZb/O7o+rGEVvhQNT5KfeLvHEvHixdaxa
CkmRMZ7kNo0yLzZm3Jv9KvWEfAWSJPJZk9hCHytMckFZwCxZqGj/vMTo3eXoMNen
cJL2XzNyVm4pEi7DrGke3TOHWjqnSMRKXJ/CuBMe6PFDubbeKFrCSo4/6viXT7Xg
kc8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAww2MHIftb0CK5MxJxmpH
AvOVdcQNPpJoAjJtUytuzdI9viTrormZSBcmbBlN2zhdywDERGshC0cJUNk2D0eI
8YZZoq2S8hr6zGx/N0mrddlKpdnhX1wQWKYOcNb72HeM2DyJK9nMwsN2PPkzWF2q
jyLIqVihTCwMqlBJFiwzFGE+1J2PvUTm7hIc2LYIRclHWUeKUWgF0nCaHREBb829
D7jQ+xJPRUXms6qWg7W63PighFjACSSV6yUYkkFFiwAco2wVkO1u/QjHuJOoQJWW
lLlEi8rceDFnknEcRRrnBWMPQmJSHPcvqkNU9Pw+vn7jiox+O2vmWuFlAy6CYy9U
uNyvYczCHjnogWC0OjfnFlLz3espNJV0dB6VuXPVTm1L/tRF23l2lV/NR73e4Gfq
jDaWaGFWcyutjRLDroNfTOLR86iyCiBIL9pbDKrhz4yDBvsRW6CZPgZeS17y4Pv5
OBDaJxvtS1bGqEQNcQ9KcZtNvnHC8X1eKm1Ds/xOCudUOzIDcOvshANCmH855ny2
VJO8hUXGpKXNbNU81HRz3TOB5wuTjY7zhLF1llNmkNZqGSlppqkyKdt7FVhy2RyK
Krb5B3rxe5DLtYqRnacuGzMReNLqtgBGMo5EPMNQaczDAg/vMCrKSEd2Hw/KkUwV
Z4J4odGYkJTfjPiOgQgT8wsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384026684619513512941866092575772910991307375996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN PKIoverheid EV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 13:10:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-04 13:10:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koninklijke KPN N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02045200'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'admin.dsh-dev.dsh.np.aws.kpn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795746484686967172949068100410915297254412847260352756062891220300357529790119934301929128562818102138697892175191997360039894486683088127039531623513540658685266282847152654879265978615126973541217096222241682170146405098201811226462572411090665358930780145395611364549567160567179450002761600332752806255679932782322563853463742247941664152648800414459247738146220508507469034466465464661156517668840807362088467801035346425673924684605171741430657668219322422773886424225453555448608523052447680370321287973572473521951458461305178791903926155811385079410555750765241237483427262720528274845661306707360347143816446773451734355576992177282772560723481873135244306307620069927538126412739679340656784382706756159327524024281859399815898193904197778158390522658057109365953468245024602490022001621020981126370453625022360778478275612786430775492296581534193218945041279701717654449068489885449030608794972662984069955895164835737924663916081926924593136888844858736114133821103867402669425482176466336470075240465032205507367974091158756416253142801977417102444088404887933068019726372979510953747009634781242977132156065093458376683573243066734200240092247669098558975043924246958633494662497654797055367326127048348497798925382411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNPKIoverheidEVCA.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://evocsp1.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a49063f9f195cbd15fa0555eefaba79cc48716df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 800385b0a76392df1c7f5f28f25d9d1ceebb4c08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/elektronische-opslagplaats'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het EV CPS PKIoverheid van KPN van toepassing. The KPN Extended Validation PKIoverheid CPS applies to this certificate.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://evcrl1.managedpki.com/KPNPKIoverheidEVCA/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dsh-dev.dsh.np.aws.kpn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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