mijn.vgz.nl

- VGZ Zorgverzekeraar N.V. -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 42:1a:45:d2:c5:4d:ff:01:bc:1d:cb:78:50:b5:24:33:20:c2:d3:74 was issued on by QuoVadis Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VGZ Zorgverzekeraar N.V.

Organization: VGZ Zorgverzekeraar N.V.
State / Province: Gelderland
Locality: Arnhem
Country: NL

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 42:1a:45:d2:c5:4d:ff:01:bc:1d:cb:78:50:b5:24:33:20:c2:d3:74
Serial Number (int): 377379292718824443834795272902160694909692203892
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d4:b7:0e:b8:cd:a3:74:13:48:79:ea:d1:d0:00:2b:16:81:f0:82:8f
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): ff:8e:13:81:5a:09:80:e5:a1:b3:ce:6b:1d:68:ec:29:4d:18:85:5b
Fingerprint (sha256): 08:c1:ac:84:57:70:fe:10:87:42:31:2b:1a:da:8a:62:30:9e:d0:34:4f:b7:c8:50:9a:fd:ad:e2:2e:29:7d:23

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate mijn.vgz.nl

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mijn.vgz.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mijn.vgz.nl
www.vgz.nl
cms.vgz.nl
vgz.nl
inloggen.vgz.nl
api.vgz.nl
cdn.vgz.nl
prodstaging.mijn.vgz.nl

Other certificates including the domain name vgz.nl

(limited to 100 certificates)
feedback.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl

Certificate

The complete raw certificate details for mijn.vgz.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377379292718824443834795272902160694909692203892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 05:48:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 05:43:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arnhem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VGZ Zorgverzekeraar N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mijn.vgz.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895681395261438783999012851884310627451728845900515158938645908585097342232216698095520656943756931515108362350786363672991525852521374802068632093066299836599757332610018833544051055600388665707965122886233995202425107383507570206907315133652946895217092586516458428226474257919659422669327459058932221969402008454600468199935858034446092402586655381349198071456359188271740367009759144746143222325138536539997188750461731788995390389468785011076829819504930176304531520958853758020488060712874086446134212359591512754796389183574244407389960446060394105074784203464531781203160470164272178821607394278371061752222320274243989702920655375946417630829740673806737786143504443838373362547975290740036982533080779327496498568293361213192364480016028406747994246537201011025542570435467547973054106484087560541121763949070427782526124293381292445955046474423545099719270184244329868991345578906607782416117790679573863995394758397644609314489696882644909348828229238634888470998791991176474833529185568328862802631751698731617311730981484840806587604609765836867728106936626841508004949585286553082173343291534593259561771433498735878359813985591179088915339029400639638966183306836516513187668793710357188316454725764487197266900509683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inloggen.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodstaging.mijn.vgz.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4b70eb8cda374134879ead1d0002b1681f0828f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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