acc-api.leven.achmea.nl
- Achmea Interne Diensten N.V. -
Issued by QuoVadis Global SSL ICA G2
About this certificate
This digital certificate with serial number 25:3e:7a:b0:ed:a6:d1:d0:60:b1:53:5a:bc:a4:e7:30:4e:05:e5:71 was issued on by QuoVadis Limited.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Achmea Interne Diensten N.V.
Organization:
Achmea Interne Diensten N.V.
State / Province:
Utrecht
Locality: Zeist
Country: NL
Locality: Zeist
Country: NL
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate will expire on
Certificate Details
Serial Number (hex): 25:3e:7a:b0:ed:a6:d1:d0:60:b1:53:5a:bc:a4:e7:30:4e:05:e5:71Serial Number (int): 212625992627264425679193739554878060229634155889
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: b1:2c:4c:e8:84:68:4e:2c:c7:3d:72:ea:6d:2a:4c:e9:dd:9b:bb:71
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27
Fingerprint (sha1): 7c:3b:da:db:49:a6:30:48:33:6c:68:c5:56:6f:83:21:b3:ee:2a:48
Fingerprint (sha256): 06:b4:f2:cd:f0:22:fb:9f:3e:cb:44:d8:e6:b4:6a:93:ed:0f:32:b1:cc:69:50:fa:95:5f:61:12:4c:5b:50:90
Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl
Check the revocation status for certificate acc-api.leven.achmea.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for acc-api.leven.achmea.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
acc-api.leven.achmea.nl
Other certificates including the domain name achmea.nl
(limited to 100 certificates)
detijdvooruit.achmea.nl
pre-inloggen-digid.achmea.nl
FTP.ACCP.achmea.nl
detijdvooruit.achmea.nl
bcn-poc.achmea.nl
mo-fed.achmea.nl
anderskijken.achmea.nl
pre-inloggen.achmea.nl
verkeersschade.achmea.nl
evenement.achmea.nl
acc.login.pensioenportaalentrance.achmea.nl
inloggen-abzdp.achmea.nl
testvision.achmea.nl
mobilerelay.achmea.nl
hybridsmtp.achmea.nl
nieuws.achmea.nl
test.webservices.achmea.nl
pensioenservice.achmea.nl
achmea.brandportal.achmea.nl
*.it.achmea.nl
news.achmea.nl
ucofw01.achmea.nl
zorgkeuze.achmea.nl
mda.achmea.nl
reputatiemanager.achmea.nl
iontw.achmea.nl
pensioenportaalentrance.achmea.nl
tst.tis.6.achmea.nl
prd-sitecorexc.schadeportaal.achmea.nl
acc.cm.schadeportaal.achmea.nl
api.leven.achmea.nl
acc.login.pensioenportaalentrance.achmea.nl
1.mig.cm.achmea.nl
e.achmea.nl
asd301.achmea.nl
onderweg2.achmea.nl
www.huisstijlwijzer.defriesland.communicatieshop.achmea.nl
acc-secure-azure.zorgzoeker.achmea.nl
acc-api.leven.achmea.nl
go.springest.achmea.nl
acc-mob.achmea.nl
nieuwsbriefduurzaamheid.achmea.nl
reputatiemanager.achmea.nl
p-alerting-achmeadpm.achmea.nl
investmentupdates.realestate-mortgages.achmea.nl
prd-sitecorexc.achmea.nl
inloggen-cert.achmea.nl
prd-wwwmijnlevenaveroachmea.nl-sitecorexc.achmea.nl
acc-averoachmeaonline.intranet.achmea.nl
ucaccess02.achmea.nl
tst-b2b-client-api.achmea.nl
acc-b2b-api.achmea.nl
nieuws.achmea.nl
acc.cm.gezondheidsverklaring.achmea.nl
f.onderzoek.achmea.nl
acc-b2b-api.achmea.nl
Achmea Interne Diensten N.V.
link.achmea.nl
zorgzoeker.achmea.nl
tst-b2b-api.achmea.nl
DP-LOONH-KEBV.achmea.nl
www.verzekeringservice.achmea.nl
verkeersschade.achmea.nl
woontest.achmea.nl
tis.7.achmea.nl
acc-secure-azure.zzcms.achmea.nl
onderweg2.achmea.nl
www.pensioenonline.achmea.nl
filerelay.test.achmea.nl
seni-sfs.achmea.nl
asd301.achmea.nl
acc-api.schadeinkomen.achmea.nl
ucaccess01.achmea.nl
tis.5.achmea.nl
api.schadeinkomen.achmea.nl
schadeportaal.achmea.nl
zorg-sfs.achmea.nl
prd-sitecorexc.achmea.nl
nieuwsbriefduurzaamheid.achmea.nl
schadeportaal.achmea.nl
acc-www.pensioenonline.achmea.nl
news.achmea.nl
www.verzekeringservice.achmea.nl
acc-secure-azure.zorgzoeker.achmea.nl
mob.achmea.nl
prd-sitecorexc.achmea.nl
prd-idin-bridge-signing-cert.achmea.nl
www.pensioenonline.achmea.nl
sapjamwidget.achmea.nl
acc.averoachmeaonline.intranet.achmea.nl
www.achmea.nl
smtprelay-nl2.achmea.nl
f.onderzoek.achmea.nl
schadeportaal.achmea.nl
acc-b2b-api.achmea.nl
attenties.achmea.nl
veilingenvankunst.achmea.nl
pensioenservice.achmea.nl
tis.ing.1.achmea.nl
prd-sitecorexc.schadeportaal.achmea.nl
pre-inloggen-digid.achmea.nl
FTP.ACCP.achmea.nl
detijdvooruit.achmea.nl
bcn-poc.achmea.nl
mo-fed.achmea.nl
anderskijken.achmea.nl
pre-inloggen.achmea.nl
verkeersschade.achmea.nl
evenement.achmea.nl
acc.login.pensioenportaalentrance.achmea.nl
inloggen-abzdp.achmea.nl
testvision.achmea.nl
mobilerelay.achmea.nl
hybridsmtp.achmea.nl
nieuws.achmea.nl
test.webservices.achmea.nl
pensioenservice.achmea.nl
achmea.brandportal.achmea.nl
*.it.achmea.nl
news.achmea.nl
ucofw01.achmea.nl
zorgkeuze.achmea.nl
mda.achmea.nl
reputatiemanager.achmea.nl
iontw.achmea.nl
pensioenportaalentrance.achmea.nl
tst.tis.6.achmea.nl
prd-sitecorexc.schadeportaal.achmea.nl
acc.cm.schadeportaal.achmea.nl
api.leven.achmea.nl
acc.login.pensioenportaalentrance.achmea.nl
1.mig.cm.achmea.nl
e.achmea.nl
asd301.achmea.nl
onderweg2.achmea.nl
www.huisstijlwijzer.defriesland.communicatieshop.achmea.nl
acc-secure-azure.zorgzoeker.achmea.nl
acc-api.leven.achmea.nl
go.springest.achmea.nl
acc-mob.achmea.nl
nieuwsbriefduurzaamheid.achmea.nl
reputatiemanager.achmea.nl
p-alerting-achmeadpm.achmea.nl
investmentupdates.realestate-mortgages.achmea.nl
prd-sitecorexc.achmea.nl
inloggen-cert.achmea.nl
prd-wwwmijnlevenaveroachmea.nl-sitecorexc.achmea.nl
acc-averoachmeaonline.intranet.achmea.nl
ucaccess02.achmea.nl
tst-b2b-client-api.achmea.nl
acc-b2b-api.achmea.nl
nieuws.achmea.nl
acc.cm.gezondheidsverklaring.achmea.nl
f.onderzoek.achmea.nl
acc-b2b-api.achmea.nl
Achmea Interne Diensten N.V.
link.achmea.nl
zorgzoeker.achmea.nl
tst-b2b-api.achmea.nl
DP-LOONH-KEBV.achmea.nl
www.verzekeringservice.achmea.nl
verkeersschade.achmea.nl
woontest.achmea.nl
tis.7.achmea.nl
acc-secure-azure.zzcms.achmea.nl
onderweg2.achmea.nl
www.pensioenonline.achmea.nl
filerelay.test.achmea.nl
seni-sfs.achmea.nl
asd301.achmea.nl
acc-api.schadeinkomen.achmea.nl
ucaccess01.achmea.nl
tis.5.achmea.nl
api.schadeinkomen.achmea.nl
schadeportaal.achmea.nl
zorg-sfs.achmea.nl
prd-sitecorexc.achmea.nl
nieuwsbriefduurzaamheid.achmea.nl
schadeportaal.achmea.nl
acc-www.pensioenonline.achmea.nl
news.achmea.nl
www.verzekeringservice.achmea.nl
acc-secure-azure.zorgzoeker.achmea.nl
mob.achmea.nl
prd-sitecorexc.achmea.nl
prd-idin-bridge-signing-cert.achmea.nl
www.pensioenonline.achmea.nl
sapjamwidget.achmea.nl
acc.averoachmeaonline.intranet.achmea.nl
www.achmea.nl
smtprelay-nl2.achmea.nl
f.onderzoek.achmea.nl
schadeportaal.achmea.nl
acc-b2b-api.achmea.nl
attenties.achmea.nl
veilingenvankunst.achmea.nl
pensioenservice.achmea.nl
tis.ing.1.achmea.nl
prd-sitecorexc.schadeportaal.achmea.nl
Certificate
The complete raw certificate details for acc-api.leven.achmea.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIADCCBuigAwIBAgIUJT56sO2m0dBgsVNavKTnME4F5XEwDQYJKoZIhvcNAQEL BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTI0MDExNTE0MzA0 NloXDTI1MDExNTE0MjUwMFoweDELMAkGA1UEBhMCTkwxEDAOBgNVBAgMB1V0cmVj aHQxDjAMBgNVBAcMBVplaXN0MSUwIwYDVQQKDBxBY2htZWEgSW50ZXJuZSBEaWVu c3RlbiBOLlYuMSAwHgYDVQQDDBdhY2MtYXBpLmxldmVuLmFjaG1lYS5ubDCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALDzBYKRmWlFTzzWJkHV3eVBBMsd fG/oUbxgY7yyYiytI6gEBMChD2LqpcVWRE/JrA+P2zMRkC9APLi1bdF2yOV6oyMz G8JAEe+07gD/wMfsfFsET2FRoO3wPR1/7+3siY4XunGu/i3VxT5mo5pfn8wTMDIj vs2ygT1Gqc6d0Oph6GhNC2jqtwJa69tqcFG1oPrjavYzLTzgMIpBYmi0Tx+PtOoR Z5IGYfxxFiQSr1wFMzRAw+93HceLKXMbx2TkgAJ2HJ/TNfkvmaqUZz6G5NZnzlqj rBqHBOdMdC1zB/zVnePnr05f4nbp/pDxLoiM5c8j/XNPVyedSZkMtzir2jjAz5vD pK+NWm1NA6HKa7cQnk0nJzauOj1H4LWcL++BssHzj/PLQVZyO52SvCEWrbW7MKCD R4HTL4CV+07liBu0YC7/zpN1XdOKsYLa0mRep8u+mwqbuD2yKRboSiDt+BrRLfAJ EZiGLWz70koUH3GaUpwlzzf9OS4eU+/M1XEPRmpexjbk/Sk8sg1cC9RXm+Poj2Ys xCWmKEJvnBpktViaLOl6NrRHv1zbJE4vQFTH6qFTC+952LyW9LMXX5jwAe6qJ6sm pkLfpDC3CVQ7wU/dDAIVwJNpX2KRQF7+8L3F5/ZD2QgF19+6v8M4wkIaSbwtyi+n 2ZkVuzREqXr948XpAgMBAAGjggOrMIIDpzAMBgNVHRMBAf8EAjAAMB8GA1UdIwQY MBaAFJEZYq1bF6cw+/DeOSWxvYy5uFEnMHMGCCsGAQUFBwEBBGcwZTA3BggrBgEF BQcwAoYraHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGcyLmNy dDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29tMCIG A1UdEQQbMBmCF2FjYy1hcGkubGV2ZW4uYWNobWVhLm5sMFsGA1UdIARUMFIwRgYM KwYBBAG+WAACZAEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNn bG9iYWwuY29tL3JlcG9zaXRvcnkwCAYGZ4EMAQICMB0GA1UdJQQWMBQGCCsGAQUF BwMCBggrBgEFBQcDATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3Zh ZGlzZ2xvYmFsLmNvbS9xdnNzbGcyLmNybDAdBgNVHQ4EFgQUsSxM6IRoTizHPXLq bSpM6d2bu3EwDgYDVR0PAQH/BAQDAgWgMIIB9AYKKwYBBAHWeQIEAgSCAeQEggHg Ad4AdQDPEVbu1S58r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAY0NkVknAAAE AwBGMEQCIBjQ1tSAn7J0pcRlv9QyxFACNo8hJ+sJ0cFx3Jq0YKFxAiBM7Rx9guCX yy5ZTVv+GP/7JU1sPvXlLAHSHf5AABhNiwB1AKLjCuRF772tm3447Udnd1PXgluE lNcrXhssxLlQpEfnAAABjQ2RWhwAAAQDAEYwRAIgO+0H6KKnl6akKicKXNqciJzV YpuJdS4BH8LI+ySm5XsCIBtgnxBB1Bss8M92MXNfhH5yOlqSrc97wVVrc651K31e AHYA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGNDZFaEAAABAMA RzBFAiEA4oiC24yN8UYzQgAwNzpFbZ/hoQLz60w7OYqt6mfzs44CIDkgwlWJObOL pm8kN3EI4z1FvTVv0Z2dEJlBl50a5llEAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4b jWnAsfpksWKaOd8AAAGNDZFZTQAABAMARzBFAiBAGSoJfb4mCHeGDXHx3imQ7r6s e1RejdMNDUhDAyDT9AIhAN7eAm8+75vsO41orMA6IFjwQuJL3QU7rRnGglVKagej MA0GCSqGSIb3DQEBCwUAA4IBAQBM1kWxjj6tiouVgRMSOgiTp0gl3wq2ETBbi8JI MlYPidlY3EN44LO35XTx62vLXCizQwohlHN/L0+p15OTzPuaMOlRzVdcBEp+Ceds OjYWeoLF9kowWfIy4POh++o9JGYidsY2uWA1L2/aJJxBSz6cY9TG471bQhvDsb8Q sRyW+5mKACJu13fhUUBNQBXMhsW2E520+mozcbi05Pd9TvutsnWNCUqfEKSqd/5S cx9u+s4bleEnUXyj3BMrO+7++dGUUqKHLs09V98MO4naRFuVMWHRMLipckSXpHAi BoYD88CEasmRxDrVXDCxWEtjz+5YtlNR7fjQk6IfP3YAixjM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsPMFgpGZaUVPPNYmQdXd 5UEEyx18b+hRvGBjvLJiLK0jqAQEwKEPYuqlxVZET8msD4/bMxGQL0A8uLVt0XbI 5XqjIzMbwkAR77TuAP/Ax+x8WwRPYVGg7fA9HX/v7eyJjhe6ca7+LdXFPmajml+f zBMwMiO+zbKBPUapzp3Q6mHoaE0LaOq3Alrr22pwUbWg+uNq9jMtPOAwikFiaLRP H4+06hFnkgZh/HEWJBKvXAUzNEDD73cdx4spcxvHZOSAAnYcn9M1+S+ZqpRnPobk 1mfOWqOsGocE50x0LXMH/NWd4+evTl/idun+kPEuiIzlzyP9c09XJ51JmQy3OKva OMDPm8Okr41abU0DocprtxCeTScnNq46PUfgtZwv74GywfOP88tBVnI7nZK8IRat tbswoINHgdMvgJX7TuWIG7RgLv/Ok3Vd04qxgtrSZF6ny76bCpu4PbIpFuhKIO34 GtEt8AkRmIYtbPvSShQfcZpSnCXPN/05Lh5T78zVcQ9Gal7GNuT9KTyyDVwL1Feb 4+iPZizEJaYoQm+cGmS1WJos6Xo2tEe/XNskTi9AVMfqoVML73nYvJb0sxdfmPAB 7qonqyamQt+kMLcJVDvBT90MAhXAk2lfYpFAXv7wvcXn9kPZCAXX37q/wzjCQhpJ vC3KL6fZmRW7NESpev3jxekCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 212625992627264425679193739554878060229634155889 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 14:30:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 14:25:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Utrecht' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zeist' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Achmea Interne Diensten N.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'acc-api.leven.achmea.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721890173616220172799033960273669130645776115340231108634499035487018654490710559354517261761299707385267486731483087581689059355319918027905318775415435055882130725481528932528009230663219543644609585447396955799603583505419629021485850278864664304793198355735963859318403850274808733261276195680201974649867643702454223928372301918261527912377325701246287788555485048823725097220708578466339465028947137710530876396488108458004437081724814686032736815948750784751094110450830561453338898151966628881289389768913882345465502982330892911396258046125766678835170026887755418466482732508715762529024995159066902331160464142684723083420727284808286557746570338418060558901678925304394297282476851095578268014366812944094491441701951411845472950831628841792591897941980541582667290941945222570437830781050606603874443797757786019752402419686656292577340263040048430830031803786581217562897319649566685554445594134646804692283938757890793617552855459175701527939637635033693244516555466510843481467729093004330136939040253048428810586549396758735490168667904839342591370811535837247565503017695559053733151515725615062519576487932460712907381783532671454502988480253077708568966605538257766313378641744132123010152093090988039028074595817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-api.leven.achmea.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b12c4ce884684e2cc73d72ea6d2a4ce9dd9bbb71 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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