osr-api.kennisnet.nl
- Stichting Kennisnet -
Issued by QuoVadis PKIoverheid Organisatie Server CA - G3
About this certificate
This digital certificate with serial number 4c:a9:f7:66:f3:40:4e:7b:d0:86:82:17:60:88:22:ad:37:02:3d:f4 was issued on by QuoVadis Trustlink B.V..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Stichting Kennisnet
Company registration number:
00000003272448340000
Organization: Stichting Kennisnet
Organization unit: Voorzieningen
Organization: Stichting Kennisnet
Organization unit: Voorzieningen
State / Province:
Zuid-Holland
Locality: Zoetermeer
Country: NL
Locality: Zoetermeer
Country: NL
QuoVadis Trustlink B.V.
Organization:
QuoVadis Trustlink B.V.
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 4c:a9:f7:66:f3:40:4e:7b:d0:86:82:17:60:88:22:ad:37:02:3d:f4Serial Number (int): 437673676287926351681512813078310706572653903348
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 33:3e:e0:02:cf:24:df:a2:e2:f3:f8:06:73:a4:d6:f5:5f:a9:27:eb
AuthorityKeyId: b7:e9:d0:e9:ff:67:0e:d9:9c:0c:07:2e:97:d4:7e:4b:79:78:f4:20
Fingerprint (sha1): c9:92:58:bf:d7:c2:03:47:2e:2b:0d:75:f8:a7:c0:81:a2:9a:37:eb
Fingerprint (sha256): 14:aa:54:53:e1:f7:62:4d:50:32:e0:85:80:91:c5:e7:0e:c3:33:ae:35:be:37:55:81:fe:f1:d2:25:8b:b2:dc
Issuing Certificate URL: http://trust.quovadisglobal.com/pkioserverg3.crt
Revocation information
OCSP Server: http://sl.ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/pkioserverg3.crl
Check the revocation status for certificate osr-api.kennisnet.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for osr-api.kennisnet.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
osr-api.kennisnet.nl
osr-api-q.kennisnet.nl
osr-api-q.kennisnet.nl
Other certificates including the domain name kennisnet.nl
(limited to 100 certificates)
images.kennisnet.nl
images.kennisnet.nl
developers.wiki.kennisnet.nl
monitor.bks.kennisnet.nl
red.portal-p.kennisnet.nl
metaplus.kennisnet.nl
ict-puzzel.kennisnet.nl
proeftuinrekenen.kennisnet.nl
hksbrowser.kennisnet.nl
jenkins.bks.kennisnet.nl
kennisnet.nl
onderzoek.kennisnet.nl
forms.kennisnet.nl
webmail.kennisnet.org
bks.kennisnet.nl
wiki.kennisnet.nl
xsd.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
images.kennisnet.nl
ict-puzzel.kennisnet.nl
referentie.entree.kennisnet.nl
metaplus.kennisnet.nl
monitor.bks.kennisnet.nl
onderzoek.kennisnet.nl
*.kennisnet.nl
kennisnet.nl
bks.kennisnet.nl
kennisnet.nl
inspiratiekaart.kennisnet.nl
hksbrowser.kennisnet.nl
kennisnet.nl
kennisnet.nl
tools.kennisnet.nl
pld-po.kennisnet.nl
bks.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
kernprogrammabrowser.kennisnet.nl
wszoeken.edurep.kennisnet.nl
testvoorziening.kennisnet.nl
bks.kennisnet.nl
jenkins-federatie.bks.kennisnet.nl
hksbrowser.kennisnet.nl
monitor.bks.kennisnet.nl
bks.kennisnet.nl
forms.kennisnet.nl
kennisnet.nl
kennisnet.nl
inspiratiekaart.kennisnet.nl
kennisnet.nl
prd.onderzoek.kennisnet.nl
testvoorziening.kennisnet.nl
test-validatieservice.kennisnet.nl
bks.kennisnet.nl
edurepdemo.kennisnet.nl
osr-api.kennisnet.nl
grotestoring.kennisnet.nl
images.kennisnet.nl
bks.kennisnet.nl
ssonot.aselect-s.entree.kennisnet.nl
monitor.bks.kennisnet.nl
inspiratiekaart.kennisnet.nl
red.portal-p.kennisnet.nl
ssoquery.aselect.entree.kennisnet.nl
entree-account.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
kennisnet.nl
entree.confederatie.kennisnet.nl
jenkins-oso.bks.kennisnet.nl
referentie.entree.kennisnet.nl
referentie.entree.kennisnet.nl
wsdl.kennisnet.nl
developers.wiki.kennisnet.nl
vocabulaires.kennisnet.nl
client.vpn.kennisnet.nl
images.kennisnet.nl
pld-po.kennisnet.nl
ict-puzzel.kennisnet.nl
artifactory.bks.kennisnet.nl
jenkins-federatie.bks.kennisnet.nl
sql.mta.kennisnet.nl
edurepdemo.kennisnet.nl
*.kennisnet.nl
*.bks.kennisnet.nl
xsd.kennisnet.nl
onderzoek.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
red.portal-a.kennisnet.nl
test.hksbrowser.kennisnet.nl
bks.kennisnet.nl
monitor.bks.kennisnet.nl
entree-account.kennisnet.nl
proeftuinrekenen.kennisnet.nl
red.portal-p.kennisnet.nl
harvester.edurep.kennisnet.nl
grotestoring.kennisnet.nl
servicecheck.kennisnet.nl
wiki.kennisnet.nl
kort.dev.kennisnet.nl
pld-po.kennisnet.nl
grotestoring.kennisnet.nl
images.kennisnet.nl
developers.wiki.kennisnet.nl
monitor.bks.kennisnet.nl
red.portal-p.kennisnet.nl
metaplus.kennisnet.nl
ict-puzzel.kennisnet.nl
proeftuinrekenen.kennisnet.nl
hksbrowser.kennisnet.nl
jenkins.bks.kennisnet.nl
kennisnet.nl
onderzoek.kennisnet.nl
forms.kennisnet.nl
webmail.kennisnet.org
bks.kennisnet.nl
wiki.kennisnet.nl
xsd.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
images.kennisnet.nl
ict-puzzel.kennisnet.nl
referentie.entree.kennisnet.nl
metaplus.kennisnet.nl
monitor.bks.kennisnet.nl
onderzoek.kennisnet.nl
*.kennisnet.nl
kennisnet.nl
bks.kennisnet.nl
kennisnet.nl
inspiratiekaart.kennisnet.nl
hksbrowser.kennisnet.nl
kennisnet.nl
kennisnet.nl
tools.kennisnet.nl
pld-po.kennisnet.nl
bks.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
kernprogrammabrowser.kennisnet.nl
wszoeken.edurep.kennisnet.nl
testvoorziening.kennisnet.nl
bks.kennisnet.nl
jenkins-federatie.bks.kennisnet.nl
hksbrowser.kennisnet.nl
monitor.bks.kennisnet.nl
bks.kennisnet.nl
forms.kennisnet.nl
kennisnet.nl
kennisnet.nl
inspiratiekaart.kennisnet.nl
kennisnet.nl
prd.onderzoek.kennisnet.nl
testvoorziening.kennisnet.nl
test-validatieservice.kennisnet.nl
bks.kennisnet.nl
edurepdemo.kennisnet.nl
osr-api.kennisnet.nl
grotestoring.kennisnet.nl
images.kennisnet.nl
bks.kennisnet.nl
ssonot.aselect-s.entree.kennisnet.nl
monitor.bks.kennisnet.nl
inspiratiekaart.kennisnet.nl
red.portal-p.kennisnet.nl
ssoquery.aselect.entree.kennisnet.nl
entree-account.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
kennisnet.nl
entree.confederatie.kennisnet.nl
jenkins-oso.bks.kennisnet.nl
referentie.entree.kennisnet.nl
referentie.entree.kennisnet.nl
wsdl.kennisnet.nl
developers.wiki.kennisnet.nl
vocabulaires.kennisnet.nl
client.vpn.kennisnet.nl
images.kennisnet.nl
pld-po.kennisnet.nl
ict-puzzel.kennisnet.nl
artifactory.bks.kennisnet.nl
jenkins-federatie.bks.kennisnet.nl
sql.mta.kennisnet.nl
edurepdemo.kennisnet.nl
*.kennisnet.nl
*.bks.kennisnet.nl
xsd.kennisnet.nl
onderzoek.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
red.portal-a.kennisnet.nl
test.hksbrowser.kennisnet.nl
bks.kennisnet.nl
monitor.bks.kennisnet.nl
entree-account.kennisnet.nl
proeftuinrekenen.kennisnet.nl
red.portal-p.kennisnet.nl
harvester.edurep.kennisnet.nl
grotestoring.kennisnet.nl
servicecheck.kennisnet.nl
wiki.kennisnet.nl
kort.dev.kennisnet.nl
pld-po.kennisnet.nl
grotestoring.kennisnet.nl
Certificate
The complete raw certificate details for osr-api.kennisnet.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfjCCBWagAwIBAgIUTKn3ZvNATnvQhoIXYIgirTcCPfQwDQYJKoZIhvcNAQEL BQAwgYIxCzAJBgNVBAYTAk5MMSAwHgYDVQQKDBdRdW9WYWRpcyBUcnVzdGxpbmsg Qi5WLjEXMBUGA1UEYQwOTlRSTkwtMzAyMzc0NTkxODA2BgNVBAMML1F1b1ZhZGlz IFBLSW92ZXJoZWlkIE9yZ2FuaXNhdGllIFNlcnZlciBDQSAtIEczMB4XDTIwMDMx NjEyMzY1NFoXDTIxMDMxNjEyNDYwMFowga0xHTAbBgNVBAUTFDAwMDAwMDAzMjcy NDQ4MzQwMDAwMQswCQYDVQQGEwJOTDEVMBMGA1UECAwMWnVpZC1Ib2xsYW5kMRMw EQYDVQQHDApab2V0ZXJtZWVyMRwwGgYDVQQKDBNTdGljaHRpbmcgS2VubmlzbmV0 MRYwFAYDVQQLDA1Wb29yemllbmluZ2VuMR0wGwYDVQQDDBRvc3ItYXBpLmtlbm5p c25ldC5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKIgJH+25EVc DcNOmKowhxuYpGvIb0HLvzPIKduMr4lUseZErsvGA0R1Z4AydGZxhiIB4Gij7H8R APuFU1uV8peWgFHftW6DyXXDAVT9ivd7Jh3wJWpBWe7GGYZjgTVigIP4gcbj3nTQ sC8JMkhuKNfYb0tHHLc/jEBlU0mEeOLS7InPJTCLtfkQDnGB7NUx1MbfAgTNzfVs JBu9RVxS0LCbhnR6xa++veo07cjUjVusHnuEP80HxFD/oERIFI5yXpRh15mPUZpu IN8qakSukAPWttunSFv/LBdHLK6syShX8xyoGHdN+pOOjYJjR5LGkI2T71c0YwHp WU0fUJ897MECAwEAAaOCAr0wggK5MB8GA1UdIwQYMBaAFLfp0On/Zw7ZnAwHLpfU fkt5ePQgMHsGCCsGAQUFBwEBBG8wbTA8BggrBgEFBQcwAoYwaHR0cDovL3RydXN0 LnF1b3ZhZGlzZ2xvYmFsLmNvbS9wa2lvc2VydmVyZzMuY3J0MC0GCCsGAQUFBzAB hiFodHRwOi8vc2wub2NzcC5xdW92YWRpc2dsb2JhbC5jb20wNwYDVR0RBDAwLoIU b3NyLWFwaS5rZW5uaXNuZXQubmyCFm9zci1hcGktcS5rZW5uaXNuZXQubmwwggE6 BgNVHSAEggExMIIBLTCCAR8GCmCEEAGHawECBQYwggEPMDQGCCsGAQUFBwIBFiho dHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbS9yZXBvc2l0b3J5MIHWBggrBgEF BQcCAjCByQyBxlJlbGlhbmNlIG9uIHRoaXMgY2VydGlmaWNhdGUgYnkgYW55IHBh cnR5IGFzc3VtZXMgYWNjZXB0YW5jZSBvZiB0aGUgcmVsZXZhbnQgUXVvVmFkaXMg Q2VydGlmaWNhdGlvbiBQcmFjdGljZSBTdGF0ZW1lbnQgYW5kIG90aGVyIGRvY3Vt ZW50cyBpbiB0aGUgUXVvVmFkaXMgcmVwb3NpdG9yeSAoaHR0cDovL3d3dy5xdW92 YWRpc2dsb2JhbC5jb20pLjAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwIG CCsGAQUFBwMBMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jcmwucXVvdmFkaXNn bG9iYWwuY29tL3BraW9zZXJ2ZXJnMy5jcmwwHQYDVR0OBBYEFDM+4ALPJN+i4vP4 BnOk1vVfqSfrMA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/BAIFADAN BgkqhkiG9w0BAQsFAAOCAgEAf+xOoqlW7dOqMDdJIqJSAE7vmUvrB3P+YEJwHEhc 7Sqdoljvr0QB45t93V3oqt79tmwWYnW6ZauvWkdoQqRsYis57OO09pyHpwlSVBdk xUuSJRoOzFS+CkrjgUmII+1g4Oz4TLXROJr1RjAFMAytD4GZMn/4kb98DLrAUJfk bmm2d714CRpK3QEpX9hFDG2H/bhUcuRd1D27OS9UufMCyz279Uw2Rr0VXUznKNN4 h/Msmw/dn3rUAU+vdmGH2OeP+v4I5ShQ+21Z5p6/Wd6MuA0pocX75+ME41roI8bD 5FA69MP96HYI54b70v3yB4n0RSbPupOl/pvkk+q7CO/sLZAc4ai9scvC60VJIUgh f/nbNpDFYYSXMXdhsrDBIR+2eQ7VbnyaXsIOXIQ8SHXEMBzxU0J0+cxzDktGKiz8 CYW4jIEZlDtK8Su1I3eA5R4DM4FFtODVna0O9x9QwXs4NCDdDwcmbo5hWiPWPlqA A6vG3xvRSWBKk4JNe4cguFxeF2YNJ3X+Lfj4fW/GEALEAUvPMrjAJs46EG/ux2V0 Tgr7UVUZfZ/xew6ePuTjbeYjgnRPgVjQnFax5vS37Z3vnsuIwslDsXoi1iPWw+KB Gt8YCykDIj6ibIIBMFBhs+8Tucd6xqzRMWitesNJqkKWoz6DYssZghUXXwqv5uYj +mg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiAkf7bkRVwNw06YqjCH G5ika8hvQcu/M8gp24yviVSx5kSuy8YDRHVngDJ0ZnGGIgHgaKPsfxEA+4VTW5Xy l5aAUd+1boPJdcMBVP2K93smHfAlakFZ7sYZhmOBNWKAg/iBxuPedNCwLwkySG4o 19hvS0cctz+MQGVTSYR44tLsic8lMIu1+RAOcYHs1THUxt8CBM3N9WwkG71FXFLQ sJuGdHrFr7696jTtyNSNW6wee4Q/zQfEUP+gREgUjnJelGHXmY9Rmm4g3ypqRK6Q A9a226dIW/8sF0csrqzJKFfzHKgYd036k46NgmNHksaQjZPvVzRjAelZTR9Qnz3s wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 437673676287926351681512813078310706572653903348 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-30237459' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Organisatie Server CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 12:36:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 12:46:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003272448340000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zoetermeer' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stichting Kennisnet' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Voorzieningen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'osr-api.kennisnet.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20466455498367292422139776025347399253160389271531653674026263271037710980347434781078608201631467365496890384101273553058288939338447561696110329176079076938445825787178783892869615524438707749636351848842718719466542962614840786994726730283361081271202848564124349645620974385307714908699176346733038716562861669866266025716071489509220753578968135636189878186504103926775159695173196083335668710737433661535841107906513252796769966618597000771798169384970654053122426454650343882211732300104678205439628969078408306468655232249476649700926512481046453154610132760163773226567722797878088871217566610395850669419713 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b7e9d0e9ff670ed99c0c072e97d47e4b7978f420 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/pkioserverg3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sl.ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osr-api.kennisnet.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osr-api-q.kennisnet.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (305 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository (http://www.quovadisglobal.com).' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/pkioserverg3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 333ee002cf24dfa2e2f3f80673a4d6f55fa927eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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