fileshare.rijswijk.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 18:2b:28:2d:2c:b0:9e:93:13:e1:f1:e7:ac:af:6a:d4 was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate contains a key usage different from ClientAuth or EmailProtection
  • ERROR: Certificate has key usage [KeyAgreement] set

Gemeente Rijswijk

Company registration number: 00000001001527812000
Organization: Gemeente Rijswijk
Organization unit: ICTBAG
State / Province: Zuid-Holland
Locality: Rijswijk
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Zuid-Holland
Locality: Rijswijk
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 18:2b:28:2d:2c:b0:9e:93:13:e1:f1:e7:ac:af:6a:d4
Serial Number (int): 32125555539237297969830052520117889748
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 66:d8:84:9f:d6:d2:2b:d8:fd:56:0c:f8:25:f7:57:5a:13:3a:0b:9f
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): d3:4b:73:c1:1d:0b:cc:52:1e:20:20:d2:af:83:cd:6d:a4:99:94:9c
Fingerprint (sha256): fd:2a:68:65:4d:23:8f:09:3b:c8:a7:d4:c5:8f:e6:a4:e6:52:c0:65:f4:4c:37:53:7b:42:f7:c6:ab:ac:84:1a


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on fileshare.rijswijk.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication
Email Protection

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: fileshare.rijswijk.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHijCCBXKgAwIBAgIQGCsoLSywnpMT4fHnrK9q1DANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE1MDgxMjAwMDAwMFoXDTE4MDgxMTIzNTk1OVowgaMxCzAJBgNV BAYTAk5MMRUwEwYDVQQIDAxadWlkLUhvbGxhbmQxETAPBgNVBAcMCFJpanN3aWpr MRowGAYDVQQKDBFHZW1lZW50ZSBSaWpzd2lqazEPMA0GA1UECwwGSUNUQkFHMR0w GwYDVQQFExQwMDAwMDAwMTAwMTUyNzgxMjAwMDEeMBwGA1UEAwwVZmlsZXNoYXJl LnJpanN3aWprLm5sMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4RGe oEejP9IiGVyL7hhs88cEWBlF8uvtIgjK1SqbWpTuj7G3J9hu6vpp6QsSqLj8yPbv j4LP/+VN3vw2Rt27SaBSWezoFM0zxTsKq2W0aSujWRiaBGnVKSR+PNEhB1kSy0gB jUhKziCHoH4MXAt41/YXJEeHNthHSDdFDhTH6kP1aZyulSa7vQImDMI+IrLffbi2 eLGlww2mckf3MBs8pEYcx9mRgRvkhjZTHgBOXffsSJwTSEaisXcmfdT+dkQ+SCaX wrKfXEwomlNwxFwZNorGVXwZhKfnYkGbsNF1rT156K4/D3+CG7WQsGyW8IL3c0Cj H10AzUSgTmZ6s+lkCqIXUG4J/ZIGP1mKGM/MnUgAPkTv0YyeHWSfDAygw9CouFyb MwSbxMPRZuelq8FwsTR7fpYG/zkpaG5GWHjRgLoqm+4lKiBM9gcr64u/O8GS7dl6 yNBGHOOCL4cJuTjzsKuY3A2RRccNNX+k99uxnAk77zIrvZd0Rnv/O2dgQBXxJO4p PhRGckhIbPB68U9T5nNVIxKscJ5dPnJg7gXlm4aoweu//iZoIJZ/QMBwRvXs0EXw xWkKEXRtQJ/rejbMNY9+TWIm1LR1Go3/l/nyJNKdyXhzW4F169nzkpyI9Lu9MG4M He1B+gTbHcANNUmel8Pwiu78M19fS3/VdfzJ75sCAwEAAaOCAfQwggHwMAwGA1Ud EwEB/wQCMAAwYgYDVR0fBFswWTBXoFWgU4ZRaHR0cDovL2NlcnQubWFuYWdlZHBr aS5jb20vY3JsL0tQTkNvcnBvcmF0ZU1hcmtldENTUE9yZ2FuaXNhdGllQ0FHMi9M YXRlc3RDUkwuY3JsMA4GA1UdDwEB/wQEAwIDqDCBpwYDVR0gBIGfMIGcMIGZBgpg hBABh2sBAgUGMIGKMDcGCCsGAQUFBwIBFitodHRwczovL2NlcnRpZmljYWF0Lmtw bi5jb20vcGtpb3ZlcmhlaWQvY3BzME8GCCsGAQUFBwICMEMaQU9wIGRpdCBjZXJ0 aWZpY2FhdCBpcyBoZXQgQ1BTIFBLSW92ZXJoZWlkIHZhbiBLUE4gdmFuIHRvZXBh c3NpbmcuMB8GA1UdIwQYMBaAFCbQZRPx7npvYQgo3k2YBxJIeLTvMB0GA1UdDgQW BBRm2ISf1tIr2P1WDPgl91daEzoLnzAnBgNVHSUEIDAeBggrBgEFBQcDAgYIKwYB BQUHAwEGCCsGAQUFBwMEMCAGA1UdEQQZMBeCFWZpbGVzaGFyZS5yaWpzd2lqay5u bDA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwMy5tYW5h Z2VkcGtpLmNvbTANBgkqhkiG9w0BAQsFAAOCAgEAtLv6AwQoQFAdY7jH6XQFOAMk QU5OZ4cXMbNdCMzC4d2dasasvhs41igZAc/QAkxDzaVbgl6rjNVdVDNjtgQGO19S 9b1pL+nkucDNYNdhbW/+QF342gXghTh+z5tpLDTTAm4fF/rb4ZVv384vCDoyZH7x FskMAWBM9lOAP2M0lgXArgdnLAldkuBy7Kh96hkXX8HWnB5ep1L8jekIYcZz15PS aWB/t1AqEphH/1SPPzU3tuKoMRwhWpYQQ1qNVu+bgA5kN8MBuQfJyxWcfdEYpDBq ZasA6hixPxundzqMl/hsbjtoSTIGqZdKFoBBx56acuyIWxED3wsg+KI7ta9PgqWY vTYAZWhaQIH6HMQbg42JyGx63uheOE65uMIJwARH9mOz4b19jmKNzDWUcCivZWP6 dJ4Awa0B0kN1ASRWpF7lAP5tAdpx+CExZQFFZE6jwKSP3o+caCATEZipbN4o4eMs sjfy2jA8kc4RLrPUpp/E4NNIG2g6mUKrp3suLf8QV3iKYXjWanhQIiqSqT0izu95 utnrUITBD0ATMQ6Baw6iymxg2iIU/6ncpnL9Z/xdmf1ElN9NHlrj1dYdNInMiYAx mgptYayZqaiUXxucYCklpRRFjPThHpeGYN7xeTt/uVCamJcDUts4UFoNAIl84/Oh ytgdiBJwh04251aKvUM= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4RGeoEejP9IiGVyL7hhs 88cEWBlF8uvtIgjK1SqbWpTuj7G3J9hu6vpp6QsSqLj8yPbvj4LP/+VN3vw2Rt27 SaBSWezoFM0zxTsKq2W0aSujWRiaBGnVKSR+PNEhB1kSy0gBjUhKziCHoH4MXAt4 1/YXJEeHNthHSDdFDhTH6kP1aZyulSa7vQImDMI+IrLffbi2eLGlww2mckf3MBs8 pEYcx9mRgRvkhjZTHgBOXffsSJwTSEaisXcmfdT+dkQ+SCaXwrKfXEwomlNwxFwZ NorGVXwZhKfnYkGbsNF1rT156K4/D3+CG7WQsGyW8IL3c0CjH10AzUSgTmZ6s+lk CqIXUG4J/ZIGP1mKGM/MnUgAPkTv0YyeHWSfDAygw9CouFybMwSbxMPRZuelq8Fw sTR7fpYG/zkpaG5GWHjRgLoqm+4lKiBM9gcr64u/O8GS7dl6yNBGHOOCL4cJuTjz sKuY3A2RRccNNX+k99uxnAk77zIrvZd0Rnv/O2dgQBXxJO4pPhRGckhIbPB68U9T 5nNVIxKscJ5dPnJg7gXlm4aoweu//iZoIJZ/QMBwRvXs0EXwxWkKEXRtQJ/rejbM NY9+TWIm1LR1Go3/l/nyJNKdyXhzW4F169nzkpyI9Lu9MG4MHe1B+gTbHcANNUme l8Pwiu78M19fS3/VdfzJ75sCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 32125555539237297969830052520117889748 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijswijk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gemeente Rijswijk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICTBAG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000001001527812000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fileshare.rijswijk.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918200703710653300704920512261598731554170899053926886315817190341674766322587069329646343130432652932606130052208674008277993325460881446546739844607479494380114259051918680555640196921065263279219377981863155587152706455853769989508970086433916136686398633326207504576092253052589647588427016441651287015034344220399662618725929322610802803093616426479154948589603086032291043213823591552391079496979015554061878845018399183213626526667563161175105792653899005365616503299966289456812518965874798950431611855679361074026000843748554642529073955649479172121417832358403187599419984650782955485627479503449591126928930739973479858635497242267964371651118641146267579350672229777905718085213853957868162281105741992888045505281057069080112417705499545345055236993839531878602067899613089455220102868257398217603732704319773253321540596303831014787033635760756943279364160908296296881552958095526270095575627068587789071243028762208236698368298767509792839308640869167978075602143979215830388106502688327791635774963514297839197220357639846224580142013160173924278780105863233863016947775783809261000130829390641009605878618724693438543020841229971271286642424577765359764096764487661358092042775038909476472250119942117992018356072347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 66d8849fd6d22bd8fd560cf825f7575a133a0b9f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileshare.rijswijk.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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