nza-portaal1.nza.nl

- De Nederlandse Zorgautoriteit (NZa) -

Issued by KPN PKIoverheid Server CA 2020

About this certificate

This digital certificate with serial number 58:f3:91:b4:04:4c:e2:4f:2c:5e:c7:7a:97:a7:26:93:ab:f3:a6:4f was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

De Nederlandse Zorgautoriteit (NZa)

Organization: De Nederlandse Zorgautoriteit (NZa)
Locality: Utrecht
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 58:f3:91:b4:04:4c:e2:4f:2c:5e:c7:7a:97:a7:26:93:ab:f3:a6:4f
Serial Number (int): 507822961453743087202312520426658644392672470607
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 49:da:1e:1b:5f:e3:fe:cd:c0:d5:ff:1c:27:f9:55:dd:b1:88:f1:3c
AuthorityKeyId: 08:4a:aa:bb:99:24:6f:be:5b:07:f1:a5:8a:99:5b:2d:47:ef:b9:3c

Fingerprint (sha1): 86:98:da:3c:cf:b3:11:4b:83:f1:f3:99:f9:11:17:66:3e:07:6a:41
Fingerprint (sha256): 26:63:71:43:0a:0e:13:8a:a7:e1:4e:b3:8b:3f:7c:e7:9c:d8:cb:3f:50:02:77:18:6e:05:56:e3:ae:d7:33:b0

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNPKIoverheidServerCA2020.cer

Revocation information

OCSP Server: http://ocsp2020.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNPKIoverheidServerCA2020/LatestCRL.crl

Check the revocation status for certificate nza-portaal1.nza.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nza-portaal1.nza.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nza-portaal1.nza.nl

Other certificates including the domain name nza.nl

(limited to 100 certificates)
www.nza.nl
zorgproducten-test.nza.nl
customerportal.uk.rlb.com
www.werkenmetdbcs.nza.nl
systems.squaredup.com
dbcregels.nza.nl
adfs.nza.nl
praatmee.nza.nl
zorgproducten-test.nza.nl
*.nza.nl
hub.theriderfirm.cc
dbcregels.nza.nl
nza-portaal1.nza.nl
servicedesk.esmsglobal.com
nzarpsamd001.nza.nl
nzarpsamd001.nza.nl
service.littlegarth.org
nza-form6.nza.nl
www.nza.nl
leren.nza.nl
dkdlmodel.nza.nl
zorgvraagtypering.nza.nl
nza-form5.nza.nl
uitwisselportaal.nza.nl
zorgproducten-test.nza.nl
customerportal.uk.rlb.com
hybrid.nza.nl
tarievenzoekerzorgprestatiemodel.nza.nl
dkdlmodel.nza.nl
support.homeinstead.ie
zorgvraagtypering-test.nza.nl
dbcregels.nza.nl
meldingsformulier.nza.nl
nzarpsamd001.nza.nl
nzarpsamd001.nza.nl
dbcregels.nza.nl
zorgclustertool-test.nza.nl
nzarpsamd002.nza.nl
nzarpsamd001.nza.nl
zorgproducten.nza.nl
www.nza.nl
zorgproducten-test.nza.nl
support.homeinstead.ie
service.littlegarth.org
soporte.martinezabolafio.com
zorgproducten-test.nza.nl
zorgproducten-test.nza.nl
nza.nl
servicedesk.coram.eu
uitwisselportaal.nza.nl
zorgcijfers.nza.nl
sd.srk-zuerich.ch
zorgproducten.nza.nl
login.nza.nl
nza-form2.nza.nl
mijn-accp.nza.nl
helpdesk.sunlight.gr
support.brill.com
portal.nza.nl
www.werkenmetdbcs.nza.nl
dbcregels.nza.nl
support.homeinstead.ie
nzarpsamd001.nza.nl
leren.nza.nl
helpdesk.itwfasteners.com
dbcregels.nza.nl
nzarpsamd002.nza.nl
mijn-accp.nza.nl
nzarpsamd002.nza.nl
nzarpsamd001.nza.nl
dbcregels.nza.nl
wireless.nza.nl
nza-portaal1.nza.nl
zorgproducten-test.nza.nl
zorgcijfers.nza.nl
uitwisselportaal.nza.nl
nza-form1.nza.nl
zorgproducten.nza.nl
nzarpsamd002.nza.nl
dbcregels.nza.nl
www.werkenmetdbcs.nza.nl
zorgproductenviewer.nza.nl
adfs.nza.nl
mta-sts.nza.nl
acceptatie.crm.nza.nl
owa.nza.nl
zorgclustertool.nza.nl
adfs.nza.nl
l1.platformrijksoverheid.nl
werkenbijde.nza.nl
ithelpdesk.koinly.io
nzarpsamd002.nza.nl
nieuwmodelggzfz.nza.nl
aanvragen.nza.nl
customerportal.uk.rlb.com
nzarpsamd001.nza.nl
nza-form3.nza.nl
l1.platformrijksoverheid.nl
helpdesk.sunlight.gr
wachttijden.nza.nl

Certificate

The complete raw certificate details for nza-portaal1.nza.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5NGjqzbPRhqhSOQ+M58
+iCZlP6QtXpi5if+KJr/zbXzEolU+Qo03KzeyTeEeXOAwr7DM/XDQPyBgnhPNetG
6O+Cwj6oIWzRWrJfAlr43XLJmU4GBzLwhv6KGWYUvwoj6phzTDh07nGVwWNILFkL
ykfKdWVYzOkq9NzyvYLDSmBSY5zP6XhqnyfNCc70otI0hK3p6ie3i0R/FNNi+u7q
GIDQD70lr+5edBPkQS6rOkHGBhXOhK0E2OjMDWuZkZUFndZ9wB1tBiJFjRCRtMHs
/8tYUD2pk1ZiwWOf3x0Gm5pzFSldKvTO69y1X4Nq6mZLDJr9JPK/PWiAtch3K1La
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 507822961453743087202312520426658644392672470607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN PKIoverheid Server CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-01 08:41:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-01 16:00:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'De Nederlandse Zorgautoriteit (NZa)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nza-portaal1.nza.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18124701922426712509564057128056921071334700670825778145006961642108677560064601190981057118511287020570172792184525901428699775703760528274219947207357862955974066080337080752102020564893780856482337273379137814715528653003417284930881835970023128112017967982634923660077323891627545201082118581495246907699174239493840643687289081224470755090645800655307204160222561395795547403738674041987824897781056227080712243475718806152343088362443036673869861520517960853250614737437937958614834594465314064981259793910839423738896448086419711725704089214149229337400655019806735809809184719571046734356460144763508005985021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 084aaabb99246fbe5b07f1a58a995b2d47efb93c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNPKIoverheidServerCA2020.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2020.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nza-portaal1.nza.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNPKIoverheidServerCA2020/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49da1e1b5fe3fecdc0d5ff1c27f955ddb188f13c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017448d3e6b2000004030047304502202f2b89864ac1827b0b60b6236a26cbc68d1f61815b9a8bd6a560e18d67dcd890022100f78af567be5e54a2ab86a49c628ffb26dca3303a4532373137bac6154b7c65d30076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017448d3e6e90000040300473045022100c0e845b7cb9bc2c6c3bba95f7f4e5de7323cd4b4e865273829ad88c723d23070022068c01564015a1590847e54b28c47985fa173280cf671b7b3eea2a88da72f3832
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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