eventgateway.acc.kpn.com

- Koninklijke KPN N.V. -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 04:fc:93:97:60:8b:bd:d4:94:d3:69:5e:c6:99:65:1f:93:8e:27:ca was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Koninklijke KPN N.V.

Company registration number: 00000003020452000000
Organization: Koninklijke KPN N.V.
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fc:93:97:60:8b:bd:d4:94:d3:69:5e:c6:99:65:1f:93:8e:27:ca
Serial Number (int): 28468607890325916023097783625855798064265963466
Serial Number lenght: 155 bits, 20 octets

SubjectKeyId: 4e:7c:2a:6f:b6:e4:a1:e3:96:01:42:ce:12:2b:96:23:da:6f:60:07
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): de:9b:ad:8a:3b:5e:9a:ce:a5:69:bb:24:ba:7e:1e:ad:6c:72:44:8c
Fingerprint (sha256): 05:04:8a:89:6b:51:61:d7:10:73:8c:de:8b:31:e8:5e:e4:dd:0a:29:05:41:e2:96:04:1a:8e:b0:d3:4a:9a:9c

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3-2019.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate eventgateway.acc.kpn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eventgateway.acc.kpn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eventgateway.acc.kpn.com

Other certificates including the domain name kpn.com

(limited to 100 certificates)
sentrymail.acc.kpnnet.org
api-stg.kpn.com
shop.kpn.com
aditum.kpn.com
status.digital.kpn.com
lotte.kpn.com
*.mcmws.pmr.kpn.com
admin.dsh-dev.dsh.np.aws.kpn.com
api.cloudcontrol.kpn.com
lotteschedulee2e2-tst-new.kpn.com
*.mcmws.pmr.kpn.com
zakelijk.kpn.com
transfer-datalab.kpn.com
cordys-zm-value.kpn.com
prexdsl-c-serviceweb.kpn.com
portal.sap-hosting.kpn.com
mcpms.pmrtest.kpn.com
mosaic.generictaskservice.tst.kpn.com
*.3xoc.infrastructure-testing.np.aws.kpn.com
rt2-vlg-1.pmr.kpn.net
0122016378.StichtingKentalis.client.mvr.kpn.com
cloudkleinzakelijk.kpn.com
secure04.lithium.com
ws.kpn.com
files.cloudcontrol.kpn.com
service.kpn.com
design.kpn.com
nieuwbouwportaal.kpn.com
aditum.kpn.com
zakelijke-community.kpn.com
*.cqbmrv.infrastructure-testing.np.aws.kpn.com
b2bacc-connect-int.kpn.com
saml.eid.kpn.com
*.hwm44g.infrastructure-testing.np.aws.kpn.com
aas.tv.kpn.com
wsipuat4.kpn.com
cordys-zm-value-acc.kpn.com
account.online.kpn.com
kpnassistent.kpn.com
*.hibwy1.infrastructure-testing.np.aws.kpn.com
frea-test.kpn.com
businesspartner-ppd-s.kpn.com
*.mcmws.pmrtest.kpn.com
store.online-demo.kpn.com
inloggen.acc.kpn.com
zakelijk.kpn.com
x.acc.kpn.com
monteurstool.kpn.com
lottedev2-tst.kpn.com
login.kpn.com
*.rzr3o1.infrastructure-testing.np.aws.kpn.com
zeus-prd.kpn.com
eventgateway.acc.kpn.com
*.c6tnfz.infrastructure-testing.np.aws.kpn.com
*.nl9s.infrastructure-testing.np.aws.kpn.com
LotteSimulation.kpn.com
atvorder.kpn.com
lotte.kpn.com
uwv.portal.soc.kpn.com
serviscopeapi.kpn.com
secure08.lithium.com
vm4.kpn.com
prexdsl.kpn.com
if.auraportal.kpn.com
w5031.kpn.com
mobielbeheer.kpn.com
*.vre7br.infrastructure-testing.np.aws.kpn.com
secure08.lithium.com
*.jhlv.infrastructure-testing.np.aws.kpn.com
marketing.kpn.com
b2bpoc-connect-portal.kpn.com
b2b-portal.sympac.kpn.com
*.fiw8vk.infrastructure-testing.np.aws.kpn.com
sip.kpn.com
bpapi.kpn.com
www.kpn.com
cloudkleinzakelijk.kpn.com
mcpms.pmr.kpn.com
login.wifi.kpn.com
mosaic.generictaskservice.acc.kpn.com
b2bacc-connect-portal.kpn.com
test.kpn.com
pah1.mvr.kpn.com
ws.api.kpn.com
*.mcmws.pmrtest.kpn.com
b2bpoc-connect.kpn.com
*.prd.cdn.bcms.kpn.com
b2bacc-connect-int.kpn.com
lottee2e2-tst-new.kpn.com
LotteScheduleE2E2.tst.kpn.com
sni.kpn.com
eherkenning.kpn.com
*.prd.cdn.bcms.kpn.com
remotesupport.kpn.com
b2b-portal.sympac.kpn.com
vpnportal-internal.kpn.com
wsipprod.kpn.com
*.nghf0k.infrastructure-testing.np.aws.kpn.com
ddci.kpn.com
vcds.stb.acc.tv.kpn.com

Certificate

The complete raw certificate details for eventgateway.acc.kpn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArEwTvqBKclC8QXKSSEO4
pb3YNeYkCPdgXx08oeGTAqObaNgsl3dS25adrWHKHeZ3bPwihv/lMGYAc1ZkkNI1
G/f7j4QN7qs3bOWWzhdIvSpasq62kCMfD4TSuuAD+m79cTFd5R2Wb2t1pkOLD7Bb
liVcddLrduNjMTCjvCBmNwnY7sBZdk8Wkej8lNdLh7Qz7meSSVzUO7sehVHnQFJY
ArhuQ3gGk42E5YJZYTLJjs+U4FSzhdejqpOrmvw9jwOOvunFGgqgr1l3YqKeScT5
2KJCQ2XklLAwIFKAuXrA5sKfS5fjukMND86p03UtIaCK/DWMR9R3o7WIFePqKmnc
HEIU9XZhHJRICghEISxuNHkPzJDOJsRjerYfMJCdsAKd4pcTm4SExF1RKSkTvXIz
oXvtLAc+/0mkwnEi29Be2639p4HpV2CUebzHf7JiUtluboeYC/kHLDiOLcVgTO7p
I+KW8y7P+9e4cGSBoEBnkQ0JtT9QwdvLvndhocUxcqRcS0SmJ5AouYZDLHdez3Nt
n1ILizPUeUVf329Q7mMppf9sIfgn+3C5jcXB4cNnKYV9hS0GjWrEJrJvOopt4cjd
6J8MCvWGMoW18Vk9pBlU5PcB7hAkYyRJbHCX1mKIRpPb3q/srXBlIo1fuhot1EZl
X+0qHYIKuJeFymNjMpHJmAsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28468607890325916023097783625855798064265963466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 11:30:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 09:30:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koninklijke KPN N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003020452000000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'eventgateway.acc.kpn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702911153144037265860432902968270565355062592499640372405676167744822715475944585694474992444080497595007529652740876167645163289559592531161372640210634656266118946678375205060357862032700715295973313412202720705994052809026658770577579018325034842600569808116586780243941294121553275057379264115528946910263569521114895060982484208690418349951694894049403728939414893173197505326225338155082142188867850370682729817697891079473010415166482191390200545983857692449171082401204425723480580050290467427314952006125845952534163413215818759520407338886326805163956554463692410609123500579377526998856751770785452458038117380061285144196569678831323925127474046624461300560640991582174596624528128926493655508726239726674899822707520997850186449969791378962839851211933495913728037909939802836536803324042982122417196626919861313695170419008640073673148477600372154450686705382478887408351382561090486652288665042485124773018377814585052058609264440254936404793853940608158547470714034336113532597419563157775386558301811134179908971372213364318656771993127633554979846356017811224879194064848001446999601568584174857864605496424912085385888904603374585202163792359505619216992917065675483568988837589606381817506705238180525055970744331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3-2019.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e7c2a6fb6e4a1e3960142ce122b9623da6f6007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventgateway.acc.kpn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c42a4fe5e000004030047304502204ad8950063003a476c1761a856840f7e3e364fdbbafc23f2d4b2a8264bd15a8e022100a77431d3d575fe6c06b7064c0944016253983e837a45820d4ee4b55d0462e7d90075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016c42a4ff600000040300463044022062899850bbba495c6a93baac1d2de1c36d225c546f541c50ab81a1f44d23c13602202b393da5192691680d0d6bef1c1f9689359346e037bff8df1df95c0b04508c65007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c42a4fe29000004030047304502207362425854042b2185a185dd9c1e67013a9b0ea0c2f0e5afe087e4bc4bb63cb9022100c5593551fa08d721474d921eaac6360ab61bb15d24b5c2b6884c86665d24a05f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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