apollo.ot.vgz.nl
- VGZ Zorgverzekeraar N.V. -
Issued by DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1
About this certificate
This digital certificate with serial number 03:53:2a:77:6d:31:04:53:1e:83:ef:80:a3:08:ae:47 was issued on by DigiCert Ireland Limited.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
VGZ Zorgverzekeraar N.V.
Organization:
VGZ Zorgverzekeraar N.V.
State / Province:
Gelderland
Locality: Arnhem
Country: NL
Locality: Arnhem
Country: NL
DigiCert Ireland Limited
Organization:
DigiCert Ireland Limited
Country:
IE
This certificate will expire on
Certificate Details
Serial Number (hex): 03:53:2a:77:6d:31:04:53:1e:83:ef:80:a3:08:ae:47Serial Number (int): 4419505949760954737925715088342822471
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 78:65:2f:42:fe:8f:30:00:14:a9:b1:76:b4:a8:c3:92:f0:d0:0d:e4
AuthorityKeyId: 18:89:e7:af:f0:28:f6:7c:ca:68:05:52:e1:62:d8:91:d6:16:65:60
Fingerprint (sha1): 8b:b1:fc:c1:51:67:36:5f:27:20:b8:f7:50:f7:3d:7d:c6:28:20:71
Fingerprint (sha256): 12:a7:11:18:c6:2d:81:16:68:f5:19:e1:b7:c3:10:6b:28:75:57:39:00:ab:32:61:76:ae:e4:31:26:c4:63:9c
Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.euCRL Distribution Point: http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl
Check the revocation status for certificate apollo.ot.vgz.nl
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for apollo.ot.vgz.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
apollo.ot.vgz.nl
apollo.at.vgz.nl
apollo.pls.vgz.nl
apollo.opl.vgz.nl
api.apollo.ot.vgz.nl
api.apollo.at.vgz.nl
api.apollo.pls.vgz.nl
api.apollo.opl.vgz.nl
apollo.ofmmock.at.vgz.nl
apollo.ofmmock.ot.vgz.nl
apollo.ofmmock.vgz.nl
apollo.at.vgz.nl
apollo.pls.vgz.nl
apollo.opl.vgz.nl
api.apollo.ot.vgz.nl
api.apollo.at.vgz.nl
api.apollo.pls.vgz.nl
api.apollo.opl.vgz.nl
apollo.ofmmock.at.vgz.nl
apollo.ofmmock.ot.vgz.nl
apollo.ofmmock.vgz.nl
Other certificates including the domain name vgz.nl
(limited to 100 certificates)
feedback.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl
Certificate
The complete raw certificate details for apollo.ot.vgz.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJeDCCB2CgAwIBAgIQA1Mqd20xBFMeg++AowiuRzANBgkqhkiG9w0BAQsFADBl MQswCQYDVQQGEwJJRTEhMB8GA1UEChMYRGlnaUNlcnQgSXJlbGFuZCBMaW1pdGVk MTMwMQYDVQQDEypEaWdpQ2VydCBHMiBUTFMgRVUgUlNBNDA5NiBTSEEzODQgMjAy MiBDQTEwHhcNMjMxMTAzMDAwMDAwWhcNMjQxMDAxMjM1OTU5WjBxMQswCQYDVQQG EwJOTDETMBEGA1UECBMKR2VsZGVybGFuZDEPMA0GA1UEBxMGQXJuaGVtMSEwHwYD VQQKExhWR1ogWm9yZ3Zlcnpla2VyYWFyIE4uVi4xGTAXBgNVBAMTEGFwb2xsby5v dC52Z3oubmwwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/NG+cMdaN lQQTdHSBuzTVnRBrHF4om78j7RbfVIww0zJwbB/9Hqjf+9yCs2eNkX4s3L0pQD3b A0n644pcrtDticdaG74YBMwX7EJMJET5I4Jf7geL7mGV/iCQ1m1NAMDcfXFz+80D 1+TX1op/QtP+z0irO4JMmHXLrq+BszHASFO7uWbKnojIvGVsL7Ne75p5AQCQdIwh +UinPM0uFzHMW8xw56NEuy0TeTXVW3ihBR+eGyb2ybOwguvWOxfxcGXiSdV8yGeM V7aOvAHFitGYlApVN/VQxoJR0EZhydrJNBck0tT2ACM19WP7RGOTwstD96VHwa9u KTwvgR7KDWO9qFBK94ltCiEx+mSe9QfXauHwHigtt310062FF6916uTPGIIRI4cR LigSfksKK08tYV/TBQbBt+CY/69z0yPbUVnBMBZNSBqvLljiYRNoxyyP0qLtveKP kK9F+g5/nlywGaImOEBw8BJX17Rl4yG7VRJF23on0mGlrGBtRUtq3YswTAvcgn2B Cb/Q9oUaCu/H9J+PrycbDB7P+mF6efz7xw/ypIotVtjQdMNw21vjArm1rJ/oPibe vmRRp9NDrhd11FOl3cnDlY3xSIneKjWCjaj0avuQ2d1pq0q8S9K9wgVIi0YYotY2 aOXXW3Iy9oubQwS4OZ0MoEbicOGo1RIGLwIDAQABo4IEFjCCBBIwHwYDVR0jBBgw FoAUGInnr/Ao9nzKaAVS4WLYkdYWZWAwHQYDVR0OBBYEFHhlL0L+jzAAFKmxdrSo w5Lw0A3kMIH6BgNVHREEgfIwge+CEGFwb2xsby5vdC52Z3oubmyCEGFwb2xsby5h dC52Z3oubmyCEWFwb2xsby5wbHMudmd6Lm5sghFhcG9sbG8ub3BsLnZnei5ubIIU YXBpLmFwb2xsby5vdC52Z3oubmyCFGFwaS5hcG9sbG8uYXQudmd6Lm5sghVhcGku YXBvbGxvLnBscy52Z3oubmyCFWFwaS5hcG9sbG8ub3BsLnZnei5ubIIYYXBvbGxv Lm9mbW1vY2suYXQudmd6Lm5sghhhcG9sbG8ub2ZtbW9jay5vdC52Z3oubmyCFWFw b2xsby5vZm1tb2NrLnZnei5ubDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsG AQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHR8ESDBGMESg QqBAhj5odHRwOi8vY3JsLmRpZ2ljZXJ0LmV1L0RpZ2lDZXJ0RzJUTFNFVVJTQTQw OTZTSEEzODQyMDIyQ0ExLmNybDCBgwYIKwYBBQUHAQEEdzB1MCMGCCsGAQUFBzAB hhdodHRwOi8vb2NzcC5kaWdpY2VydC5ldTBOBggrBgEFBQcwAoZCaHR0cDovL2Nh Y2VydHMuZGlnaWNlcnQuZXUvRGlnaUNlcnRHMlRMU0VVUlNBNDA5NlNIQTM4NDIw MjJDQTEuY3J0MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkB ZwB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi5RHiy4AAAQD AEcwRQIgFQtoGCwah2hgoHilhBIXFbnXWKkmysgRMe6kw34YpyQCIQCTh+dxbYwD Ca9ZR4WCmcQHlKrwNt+A+mgrSvkICaD5DAB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/ H4Vq68G/KIXs+GRuAAABi5RHi+MAAAQDAEcwRQIhAP0yfBjPuXf7OmdV105dsZ1x X02Rheq6+WzaFJXC/IHXAiBmY2UXKbBd9Than64AOzlZKDnapOvrQYTb28AOBDVl bQB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi5RHivoAAAQD AEYwRAIgJq5zTfOHMsYyIdqik5vZCwCGIkFIGhuQuhANg6oWjgMCIBHzGk0Mio9H zLZl/m/Q9RPuNyOZBXFUhnq5I2Pnfa2qMA0GCSqGSIb3DQEBCwUAA4ICAQCSCF4J ujbKaJByubEsWLCFhTVxNr0FWpFoLXGnZVClKv6OZGlBafJfKL+xZ1XtB0YSWffF unX0qqjzzGC8Ngfe2H8JUd+IyzMDL8FVHWbpbzBdbrn3dIToWHt9sGS4bWCvwwbP AtFPMsw/T6CaxzR2vblWlV8kyOWg3aWfvx/SaBzf/+SnG88srvl5ZT6wwxBVSoMz l/aFF+eYc/jJ3vX0/zSGO3v6EePaJIoSmo0OHl2MsFT/2hEUwfXUcQgPf3ieu8+U 5oEf9zOTIMdPHVwl0FsBAYoYB9e96KMZJE+I3C/a21Wut5QxbzggPoVstd9C8KZR EdwpgwLNm+vwhkruWyGqbY8K94MTyP1chbV8R+XtmDKA9rlvOIVyNFmxNRLSCZLt HmlijFmkp8XQgAypaaMb/0m4E8lIBO3fyV9TonXftC1wal8h8Yued7wwU7GW/MVY mdRiOJ3JZ3IOaBfv2hpQC+30vcOCxgszPBllVfvkAnLsHGiQg96ppimoOKxXVQZ+ JigGei1ERO7KA3VHmr2h41RKywAHv7y9ZUjYZcWfBwoQ216mpWDbFMraqlliQJ1n EFMHRy8NW8AfNbjB9jWf6qeVD+pckJDfMqr7v0nYKJVwEbAp37X6cPdhu5BkYV9f 3Cw2RyjmvIKjq/roG5l9bksu+Far9Q7EBp0iOQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvzRvnDHWjZUEE3R0gbs0 1Z0QaxxeKJu/I+0W31SMMNMycGwf/R6o3/vcgrNnjZF+LNy9KUA92wNJ+uOKXK7Q 7YnHWhu+GATMF+xCTCRE+SOCX+4Hi+5hlf4gkNZtTQDA3H1xc/vNA9fk19aKf0LT /s9IqzuCTJh1y66vgbMxwEhTu7lmyp6IyLxlbC+zXu+aeQEAkHSMIflIpzzNLhcx zFvMcOejRLstE3k11Vt4oQUfnhsm9smzsILr1jsX8XBl4knVfMhnjFe2jrwBxYrR mJQKVTf1UMaCUdBGYcnayTQXJNLU9gAjNfVj+0Rjk8LLQ/elR8Gvbik8L4Eeyg1j vahQSveJbQohMfpknvUH12rh8B4oLbd9dNOthRevderkzxiCESOHES4oEn5LCitP LWFf0wUGwbfgmP+vc9Mj21FZwTAWTUgary5Y4mETaMcsj9Ki7b3ij5CvRfoOf55c sBmiJjhAcPASV9e0ZeMhu1USRdt6J9JhpaxgbUVLat2LMEwL3IJ9gQm/0PaFGgrv x/Sfj68nGwwez/phenn8+8cP8qSKLVbY0HTDcNtb4wK5tayf6D4m3r5kUafTQ64X ddRTpd3Jw5WN8UiJ3io1go2o9Gr7kNndaatKvEvSvcIFSItGGKLWNmjl11tyMvaL m0MEuDmdDKBG4nDhqNUSBi8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4419505949760954737925715088342822471 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Ireland Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arnhem' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VGZ Zorgverzekeraar N.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apollo.ot.vgz.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780047642471894623088923333004996546936694748052135692816612645910165503544532906506285770527381789937285183788202661959798592830855641199826165586004368248563575759814371242358428533539202830256553306105088514959952008931093759850603839679984483662190941817329902605870756067431077283234956579755378223480331234387453318974739720370711022599698930756530941677402194840277415578579606008052223426079998356023407491706751094976626432771337091434532406384323047841381157035589125407496248160878097318865136883781476047590405869155543653166156112554675632765215292677565095550251365711742958398456778876678826005442833490421635708921159380545931759560311129284500001157382819560513948079707413538789333549300085574116830682650247571007639471390087405482532084299946266519451787737625266806171356907363740005561046932612907832371251838259807033821023273281285525577941578032352475927640804223251105667548983261857051096224610942028657392268692065919325202347388688643642974291400320987047487308919496845439880719608640040567155972449597247853426194751498858455825256579452748005576685739114234903693644180546518140732772713577462290966779836428341376537077463434224679328345708322072498063139088822412475432299540722065335788655881618991 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1889e7aff028f67cca680552e162d891d6166560 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 78652f42fe8f300014a9b176b4a8c392f0d00de4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ot.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.at.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.pls.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.opl.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.ot.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.at.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.pls.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apollo.opl.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ofmmock.at.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ofmmock.ot.vgz.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollo.ofmmock.vgz.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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