philipsen.nl

- Philipsen Accountants Adviseurs B.V. -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 7e:2c:03:ab:a6:c3:b4:42 was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Philipsen Accountants Adviseurs B.V.

Company registration number: 00000003509954130000
Organization: Philipsen Accountants Adviseurs B.V.
State / Province: Gelderland
Locality: Wijchen
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:2c:03:ab:a6:c3:b4:42
Serial Number (int): 9091645783526323266
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 3e:e1:0f:25:a9:71:9b:d1:79:4c:13:6e:b9:1d:cf:4a:98:8a:2a:cc
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): 01:be:2c:c8:e7:0f:37:8b:85:80:fb:2a:01:69:8b:76:53:82:b3:59
Fingerprint (sha256): 04:a4:d8:6e:79:1b:90:6b:70:68:ea:fd:bb:ed:0f:ab:c5:11:f6:c8:76:d2:71:40:c4:a9:a1:b0:38:24:7c:25

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate philipsen.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for philipsen.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

philipsen.nl

Other certificates including the domain name philipsen.nl

(limited to 100 certificates)
philipsen.nl
portal.philipsen.nl
www.philipsen.nl
www.stolwijkphilipsen.com
philipsen.nl
mail.philipsen.nl
www.philipsen.nl
portal.philipsen.nl
philipsen.nl
adfs.philipsen.nl
mail.philipsen.nl
afasftp.philipsen.nl
mail.philipsen.nl
philipsen.nl
portal.philipsen.nl
stolwijkkelderman.nl
mail.philipsen.nl
portal.philipsen.nl
philipsen.nl
mail.philipsen.nl
afasftp.philipsen.nl
adfs.philipsen.nl
www.philipsen.nl
www.philipsen.nl
philipsen.nl
mail.philipsen.nl
mail.philipsen.nl
stolwijk-philipsen.com

Certificate

The complete raw certificate details for philipsen.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8dXD93Qkn9mnXVqpuFv
Zfv/+VoaZKiCu2iT25Tb1+TLT1ZCeHkg/yayNQiU7AA6rONOCMqB1sVtR1w1evqs
kzHFdDwiY6RXsTauQkZ46yoYn8P8Qq0XRKZgtfoqFRvYkAWGFl7ODDbq7xPZmERN
8uxXI+E1wKwhCp4DDGX8cTkBb5eF9jpCB48L+cVyVtK/1ilJVbTHZUbk4A2Rrh34
z95A3PWcnaVVk+2sAd/8ekaJ0Go48R3nz6IPnJtJ5f89ypOKcT3f+CjK+KfA/DIP
LHO8Vr/WU5SkR6s4iQ8iBsf20j/rgfdhc8khO5qzChahj3DVnB3dt3MxAw6OJiMc
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9091645783526323266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 11:10:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-21 11:10:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wijchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Philipsen Accountants Adviseurs B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003509954130000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'philipsen.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20170188749563767846863617976721321938170542128015399011328551034453567202727829539329736657196311952728558178965656437256380764951771321053218617841831037221337294821723688550423665630926054738735524876455098512123936155000559702521125554449588213308864536536054957006147038229583415450809465927816480557491205412845548019115089455115907317696562029383342757251350387061571666649774350271432429841226632758702092022531057420911554700441020422242318289287638669763778175747809378476535092024741550245373411435267426369466950137626345285461410770466813819248058969023849262812840244595588535447156770548139390243380341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ee10f25a9719bd1794c136eb91dcf4a988a2acc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philipsen.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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