www.verkiezingen2014.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 17:72:0b:81:04:23:10:a8:37:e6:78:da:3f:5a:a2:bc was issued on by KPN Corporate Market BV .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set

Dienst Publiek en Communicatie

Organization: Dienst Publiek en Communicatie
Organization unit: Rijksoverheid
State / Province: Zuid-Holland
Locality: Den Haag
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Zuid-Holland
Locality: Den Haag
Country: NL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 17:72:0b:81:04:23:10:a8:37:e6:78:da:3f:5a:a2:bc
Serial Number (int): 31164399073144971038830914343945282236
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: cf:64:27:56:48:02:c0:51:ba:df:0e:86:0b:f9:f7:a7:2d:a5:26:48
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): 82:d2:be:f5:75:a6:4a:d2:6f:15:ed:59:f9:f1:6d:33:4e:40:b7:7e
Fingerprint (sha256): 70:ec:65:f8:86:ef:12:0f:39:69:a5:93:05:cb:b6:ea:b8:65:b5:46:f8:17:39:5c:e1:7f:ee:34:77:0e:a6:25


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on www.verkiezingen2014.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.verkiezingen2014.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGxTCCBK2gAwIBAgIQF3ILgQQjEKg35njaP1qivDANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTEzMTEwNTAwMDAwMFoXDTE2MTEwNDIzNTk1OVowgZoxCzAJBgNV BAYTAk5MMRUwEwYDVQQIDAxadWlkLUhvbGxhbmQxETAPBgNVBAcMCERlbiBIYWFn MScwJQYDVQQKDB5EaWVuc3QgUHVibGllayBlbiBDb21tdW5pY2F0aWUxFjAUBgNV BAsMDVJpamtzb3ZlcmhlaWQxIDAeBgNVBAMMF3d3dy52ZXJraWV6aW5nZW4yMDE0 Lm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulQCViEe9ZSlmSTd 86LzzjH80A/YoyetuxJxgwEahoV/m8CDViQUlSyA6Iw1YEb7DKhNHzx6W6Af8tIP aAnOnDketFACgDbJCUIvz+RA1CnXU4cQJCg9HDEOILTG/Td7aX4oXPBnjLCM4k7R uGHY3c82LpZr8W3wdOs2doxzoPAtGnR6UD5jmljVE8lhvnwASEKXXUP/UaNr5RDX Q4MQ2avXIACMgtc38K/jgjWDj+hp3x41ead1COA7I4d216sl9u3KGGljuqN3Ifz3 DXiH+nX1kko7ve2r/L1oO2eWolmzKqWpPcMHvEM8moZmjfNavKuHL0ql80c6Ekki ghYBMwIDAQABo4ICODCCAjQwDAYDVR0TAQH/BAIwADBiBgNVHR8EWzBZMFegVaBT hlFodHRwOi8vY2VydC5tYW5hZ2VkcGtpLmNvbS9jcmwvS1BOQ29ycG9yYXRlTWFy a2V0Q1NQT3JnYW5pc2F0aWVDQUcyL0xhdGVzdENSTC5jcmwwDgYDVR0PAQH/BAQD AgOoMIGnBgNVHSAEgZ8wgZwwgZkGCmCEEAGHawECBQYwgYowNwYIKwYBBQUHAgEW K2h0dHBzOi8vY2VydGlmaWNhYXQua3BuLmNvbS9wa2lvdmVyaGVpZC9jcHMwTwYI KwYBBQUHAgIwQxpBT3AgZGl0IGNlcnRpZmljYWF0IGlzIGhldCBDUFMgUEtJb3Zl cmhlaWQgdmFuIEtQTiB2YW4gdG9lcGFzc2luZy4wHwYDVR0jBBgwFoAUJtBlE/Hu em9hCCjeTZgHEkh4tO8wHQYDVR0OBBYEFM9kJ1ZIAsBRut8Ohgv596ctpSZIMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBuBgNVHREEZzBlghd3d3cudmVy a2llemluZ2VuMjAxNC5ubKBKBgorBgEEAYI3FAIDoDwMOjIuMTYuNTI4LjEuMTAw My4xLjMuNS45LjEuMWZkNTE1MWFiYzY2M2IwMjYxNjIwNWQ1M2RjMjE3ZGQwNwYI KwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcDMubWFuYWdlZHBr aS5jb20wDQYJKoZIhvcNAQELBQADggIBADlgdGFvnt3I5vRVFYaJQUGwheIk/Q+L UuG5XyaCRaFu7//7cNiEkjQ0Hak2+a7f8b9mQOhxyb8fLde4BoD9o/1yRyFvwCP0 /QSFBLuaoxxV4mfrZatnu0TWfetC4BcpIPcNH5YthlazC3M0kmiRFRqtt3Xnryvk UlVZjHTz+5IkyyZw1eezGYrZ6AOuI08BGb/UB0cb6Q/86jFirmDMW3ZxzAtUHxVq mu5WJK5uHqxeT/guZ3NLuBvufpH9sq/jQwwNpxxrH7h5p8COfGO1Lhd2mvUVIYlO HKyDMABvRaHX9ysgHnP6IjG7+qxmccYuxVq94ZRwYBEavasN2YhremyDnnWgq6dv ETqVSxsDXk8l0bugr2EYXRC5Te+91mENDrYZzOEqlDvuOHPFqFD98zbIkaYjsguS LC6F/ImXeR/2EZwXeVLyM1xGZJf+qjdl9fMKY7dkDndNYbNYUQZ9r1Cjlw6kIbYt mGtv5ct3/S9jrPZ0bIowDi4o2iDvl7E73GU2Z7fBmutPy08CnNw9Cj8rozW6sg4O KNGuEIsRrhBazJg4XUF1QV0ocTZvQ5+ikBSA9jMsCBgKcxiMp7MepWNv1JLayurO HrlEfwqs4WB7XcWmnxMTtfdXE8hvy/EyrTIKCkbj/USzoEJS0ag6t55+JMBo1uMi RbDN7OGTq7LC -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulQCViEe9ZSlmSTd86Lz zjH80A/YoyetuxJxgwEahoV/m8CDViQUlSyA6Iw1YEb7DKhNHzx6W6Af8tIPaAnO nDketFACgDbJCUIvz+RA1CnXU4cQJCg9HDEOILTG/Td7aX4oXPBnjLCM4k7RuGHY 3c82LpZr8W3wdOs2doxzoPAtGnR6UD5jmljVE8lhvnwASEKXXUP/UaNr5RDXQ4MQ 2avXIACMgtc38K/jgjWDj+hp3x41ead1COA7I4d216sl9u3KGGljuqN3Ifz3DXiH +nX1kko7ve2r/L1oO2eWolmzKqWpPcMHvEM8moZmjfNavKuHL0ql80c6EkkighYB MwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 31164399073144971038830914343945282236 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Den Haag' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dienst Publiek en Communicatie' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksoverheid' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.verkiezingen2014.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23521751168062203151436095518377967470800689390961583833281810534497589422939341482963796211892254652771043319658963276275996144040996951914947985841193256489883231073943047406729140778374079555681432978660617930864172877492615559416080279444259888286417053091364884665826852091276790504700476075267782759962916484348245160713908978793172267400200913720113763814300356376375876174573751033317473947631730952023522975266478192740911199609587219091620537444284301514625382912078362922445124997363436951866599851157202192585743085174437404204156305836198990224403797024618165330245037891740455716097851554684194673525043 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf6427564802c051badf0e860bf9f7a72da52648 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verkiezingen2014.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.1fd5151abc663b02616205d53dc217dd' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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