jabber.staatsbosbeheer.nl
- Staatsbosbeheer -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 71:b9:f5:4c:b0:74:59:b9:c0:4b:0e:e6:77:d2:56:ff was issued on by thawte, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Staatsbosbeheer
Organization:
Staatsbosbeheer
Organization unit: BackOffice ICT
Organization unit: BackOffice ICT
State / Province:
Utrecht
Locality: Amersfoort
Country: NL
Locality: Amersfoort
Country: NL
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 71:b9:f5:4c:b0:74:59:b9:c0:4b:0e:e6:77:d2:56:ffSerial Number (int): 151168313708827703333504706994559407871
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): a7:60:1d:01:c8:1c:c2:2f:ae:2b:6a:7e:f2:1c:8b:87:e0:4a:81:c5
Fingerprint (sha256): 1b:15:90:0f:b5:be:d9:8d:91:b6:1c:24:c3:46:cb:e3:01:80:53:40:9f:7c:27:97:db:90:40:22:69:82:8b:25
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate jabber.staatsbosbeheer.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jabber.staatsbosbeheer.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
Other certificates including the domain name staatsbosbeheer.nl
(limited to 100 certificates)
jabber.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
www.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
tunnel.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.ambuj.tech
hermes.thegodschallenge.com
cdn.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
eas.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
mx.staatsbosbeheer.nl
www.ambuj.tech
clicks.w.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
SBB10VS010V.staatsbosbeheer.nl
xn--trimtch-198d.ml
vrijwilligers.staatsbosbeheer.nl
werkenbij.staatsbosbeheer.nl
marketplace.hashcove.com
webclient.staatsbosbeheer.nl
SBB10UX010V.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
line-dev.onedee.ai
vpn.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
www.yowai.band
embedkaart.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
www.m-rental.co
w.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
wallboard.apps.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
app.scrollytelling.io
elswout.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
scrollytelling-2018-436854.c66.me
www.winkel.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
altiris.apps.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
covid19reports.app
mx.staatsbosbeheer.nl
app.scrollytelling.io
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
carsonbook.carsonh.com
www.bluebeak.ai
vrijwilligers.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
sbb10vm010v-ms.staatsbosbeheer.nl
groenalliantie.staatsbosbeheer.nl
merkportaal.staatsbosbeheer.nl
*.staatsbosbeheer.nl
millingerwaard.staatsbosbeheer.nl
sbb10im010v-ms.staatsbosbeheer.nl
www.npiapi.com
kaart.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
betalen.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
sbb10vs010v.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
eric.smyth.app
cdn.staatsbosbeheer.nl
elswout.staatsbosbeheer.nl
vpnwolk.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
embedkaart.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
webclient.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
www.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
tunnel.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.ambuj.tech
hermes.thegodschallenge.com
cdn.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
eas.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
mx.staatsbosbeheer.nl
www.ambuj.tech
clicks.w.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
SBB10VS010V.staatsbosbeheer.nl
xn--trimtch-198d.ml
vrijwilligers.staatsbosbeheer.nl
werkenbij.staatsbosbeheer.nl
marketplace.hashcove.com
webclient.staatsbosbeheer.nl
SBB10UX010V.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
line-dev.onedee.ai
vpn.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
www.yowai.band
embedkaart.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
www.m-rental.co
w.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
wallboard.apps.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
app.scrollytelling.io
elswout.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
scrollytelling-2018-436854.c66.me
www.winkel.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
altiris.apps.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
covid19reports.app
mx.staatsbosbeheer.nl
app.scrollytelling.io
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
carsonbook.carsonh.com
www.bluebeak.ai
vrijwilligers.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
sbb10vm010v-ms.staatsbosbeheer.nl
groenalliantie.staatsbosbeheer.nl
merkportaal.staatsbosbeheer.nl
*.staatsbosbeheer.nl
millingerwaard.staatsbosbeheer.nl
sbb10im010v-ms.staatsbosbeheer.nl
www.npiapi.com
kaart.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
betalen.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
sbb10vs010v.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
eric.smyth.app
cdn.staatsbosbeheer.nl
elswout.staatsbosbeheer.nl
vpnwolk.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
embedkaart.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
webclient.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
Certificate
The complete raw certificate details for jabber.staatsbosbeheer.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgIQcbn1TLB0WbnASw7md9JW/zANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYxMjIwMDAwMDAwWhcNMTgxMjIwMjM1OTU5 WjCBizELMAkGA1UEBhMCTkwxEDAOBgNVBAgMB1V0cmVjaHQxEzARBgNVBAcMCkFt ZXJzZm9vcnQxGDAWBgNVBAoMD1N0YWF0c2Jvc2JlaGVlcjEXMBUGA1UECwwOQmFj a09mZmljZSBJQ1QxIjAgBgNVBAMMGWphYmJlci5zdGFhdHNib3NiZWhlZXIubmww ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCe50AauiL0DpoHoIefWGXV IbvBtFG7YY+E9RkGe29xHIZ3mLGuJCKzcoNwC57NEZ07AC0FiTn9D4lUEMcQpm0P /WmPSqmoIMBD1+lR/OLRJcfYgIR741BMv4XOrO7Q7/189cAdwKU9jw5Ih8raPjsk CgRXSfq0uFXtSkWDYjFImC6esVLLU6jG+3SlG9/VoTh6C5DCFuIe28P/u8O2YxXW Rafq1tWJsgiYVMXWFJffD8/Sq2I9eTcw+4EMyxrL3V930ArPzEV2rrfWvMp/jTao IO/fcvXgz1iXFhWd8tU9HJjDGDLWOZHWU8hNa6JNYh3o0cJVw1XtS4Ex6BBx+dwa STu4YmylBW8mBIJKHeEManTzxarcguthK5QMoIcpQcnQXUgZIv0d8PHdxMC74ZCf XB4Gn4UZ+y8nF/W/3Rib/jzxxlkv8hwUQwem6/eneNsmCNkgIw3gXAsAw6ZsZR11 ybqPe45j8E+CtEtLCMW3Nr7ytUSvyFjlTdlAjD5M+ZzqI4Hr0rzehpwwaMhoGgBI gY1CMXKQbcBZHnOHQOhxRqrkSmD+KAAp1ExTFfqNKqno1tthjFLWBcjb5C3Ex5oS Umr7aL2QelqlvCZeLQKuOnJ65W/a+kKTCC0RWoA6t6tAeGEG9DJGPEqot/iYPJOX Y9KgsB8hxT01dAKTSF0MBQIDAQABo4IBpDCCAaAwOAYDVR0RBDEwL4ISc3RhYXRz Ym9zYmVoZWVyLm5sghlqYWJiZXIuc3RhYXRzYm9zYmVoZWVyLm5sMAkGA1UdEwQC MAAwbgYDVR0gBGcwZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93 d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhh d3RlLmNvbS9yZXBvc2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTC T0hX/NFPmsBdOH0OBdvZLrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGou c3ltY2IuY29tL3RqLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw VwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29t MCYGCCsGAQUFBzAChhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJkDm31QQEz4m9HmYVve Szi8prD9rr3L7UIsH1xqz+WrtnIKovggcpHAGJD/K7EXEG/B0KxqV+Z26t4THEPw PfmT9R4Z5TCCwe+1JIKXGnBwoRCBtlHXqtS221NpHEPjy9+nX6qFzGoBl9eWc21o JKm+dJxl/7qVkr8W/M47fufS8+I2WeqySlvgVTFhm3cDUJHv0wPvM2cmPQu9WU7Y OPUVkrvQVkzPGB/w7kOuFwmMXtibRQ1mYbjWYwcFig1wt0ijwk+a6rzWm4HjVdof Blmw1zyF9NQ5RkcQ9ms000YAukNDfUqRU4Pao0OnTMOFViDHLz9kUtEzstdGY+BH Ag== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnudAGroi9A6aB6CHn1hl 1SG7wbRRu2GPhPUZBntvcRyGd5ixriQis3KDcAuezRGdOwAtBYk5/Q+JVBDHEKZt D/1pj0qpqCDAQ9fpUfzi0SXH2ICEe+NQTL+Fzqzu0O/9fPXAHcClPY8OSIfK2j47 JAoEV0n6tLhV7UpFg2IxSJgunrFSy1Ooxvt0pRvf1aE4eguQwhbiHtvD/7vDtmMV 1kWn6tbVibIImFTF1hSX3w/P0qtiPXk3MPuBDMsay91fd9AKz8xFdq631rzKf402 qCDv33L14M9YlxYVnfLVPRyYwxgy1jmR1lPITWuiTWId6NHCVcNV7UuBMegQcfnc Gkk7uGJspQVvJgSCSh3hDGp088Wq3ILrYSuUDKCHKUHJ0F1IGSL9HfDx3cTAu+GQ n1weBp+FGfsvJxf1v90Ym/488cZZL/IcFEMHpuv3p3jbJgjZICMN4FwLAMOmbGUd dcm6j3uOY/BPgrRLSwjFtza+8rVEr8hY5U3ZQIw+TPmc6iOB69K83oacMGjIaBoA SIGNQjFykG3AWR5zh0DocUaq5Epg/igAKdRMUxX6jSqp6NbbYYxS1gXI2+QtxMea ElJq+2i9kHpapbwmXi0CrjpyeuVv2vpCkwgtEVqAOrerQHhhBvQyRjxKqLf4mDyT l2PSoLAfIcU9NXQCk0hdDAUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 151168313708827703333504706994559407871 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Utrecht' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amersfoort' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Staatsbosbeheer' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BackOffice ICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'jabber.staatsbosbeheer.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648268994600706693778758819168247389341004204041499341930848564417378388183301803023449954216200318884973250527563141651519140091373092309652878208833718119889955476448016544196187372863219962228330632185122068742565784919074537552987829737689962597844005273979164487820631926732634263065852594568970000276028665117263569245887365085229312037694129253541632236894062114815956204601022537448810246632904400996142715232389454270927233771209036332021570867532212119845374915913777058333275383782690468101515298653473877894164527432937538105264678368216335828916436003409102042365002440200926247594368393761786436784175925451109090403894763481236049497620484234616560600721284322914563204103911796124223359393546777192139632131169240474302250747189506395157764469486428958127555136120352084124308605953306047550418497177204516402787878224914731292563653702071412091045511700003631010423659854327536603604982783488667404833546504690676840003032901761904271635533086771257544371505883816215798541691348596258194091798868487992661630040100433201612758014463794593503051790020876131485249031534725955445288480185461965888956670251349929773434987449878102425607593735001349560666544987083593913488616828302622858516191619781847084335502265349 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staatsbosbeheer.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabber.staatsbosbeheer.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009499039b7d50404cf89bd1e6615bde4b38bca6b0fdaebdcbed422c1f5c6acfe5abb6720aa2f8207291c01890ff2bb117106fc1d0ac6a57e676eade131c43f03df993f51e19e53082c1efb52482971a7070a11081b651d7aad4b6db53691c43e3cbdfa75faa85cc6a0197d796736d6824a9be749c65ffba9592bf16fcce3b7ee7d2f3e23659eab24a5be05531619b77035091efd303ef3367263d0bbd594ed838f51592bbd0564ccf181ff0ee43ae17098c5ed89b450d6661b8d66307058a0d70b748a3c24f9aeabcd69b81e355da1f0659b0d73c85f4d439464710f66b34d34600ba43437d4a915383daa343a74cc3855620c72f3f6452d133b2d74663e04702