lab-download.netpos.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 23:e3:15:6a:19:34:17:9f:d6:01:58:0a:51:99:af:d4 was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Dienst voor het kadaster en de openbare registers

Company registration number: 00000001802327497000
Organization: Dienst voor het kadaster en de openbare registers
Organization unit: Kadaster Services
State / Province: Gelderland
Locality: Apeldoorn
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Gelderland
Locality: Apeldoorn
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 23:e3:15:6a:19:34:17:9f:d6:01:58:0a:51:99:af:d4
Serial Number (int): 47702065575946465571444062141778866132
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 76:77:e9:9f:39:99:a8:26:15:ee:80:f9:7a:09:4e:40:d7:32:60:bf
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): 3b:4d:28:da:df:2f:22:7b:c9:00:ca:16:98:b6:03:ed:46:0f:41:dd
Fingerprint (sha256): b0:75:f4:bc:1a:4b:58:26:3c:94:81:11:31:98:e7:dc:8a:de:a6:63:92:fc:95:1a:18:41:68:cd:d3:f4:b5:f0


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on lab-download.netpos.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: lab-download.netpos.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIG+DCCBOCgAwIBAgIQI+MVahk0F5/WAVgKUZmv1DANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE0MDMyODAwMDAwMFoXDTE3MDMyNzIzNTk1OVowgc4xCzAJBgNV BAYTAk5MMRMwEQYDVQQIDApHZWxkZXJsYW5kMRIwEAYDVQQHDAlBcGVsZG9vcm4x OjA4BgNVBAoMMURpZW5zdCB2b29yIGhldCBrYWRhc3RlciBlbiBkZSBvcGVuYmFy ZSByZWdpc3RlcnMxGjAYBgNVBAsMEUthZGFzdGVyIFNlcnZpY2VzMR0wGwYDVQQF ExQwMDAwMDAwMTgwMjMyNzQ5NzAwMDEfMB0GA1UEAwwWbGFiLWRvd25sb2FkLm5l dHBvcy5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANrKNeqipfSr 5eqjLNwNiEpv5ToHd7L5sSnCP9gVUTQFgqpkrcEu7lYvCUaJHTv+vihlSSKk9jIz yz5uf51boJ/ly8FLYa2EreXaVnhJWHISUzzw9bItXMBGc+jE+OpKyKrtNIlNuWuH arWtppJy5Aed18WWYZDUyJzIcyLEofz+nSpt6D2q6td0/kFL8X8SZ7lvEhnWGWHT zFgjQP46p4aCnjpfrULDYIq0AOKyv8EDTcfxChKFnKexLYg+TODRDb1xRPPcid2I YrBqEbdX+aoTP5GVhtAsP5UMNMTfAo63VDFTAaXS+alS3N074w1EYOfSdeO3kamL k5TjKTcpa08CAwEAAaOCAjcwggIzMAwGA1UdEwEB/wQCMAAwYgYDVR0fBFswWTBX oFWgU4ZRaHR0cDovL2NlcnQubWFuYWdlZHBraS5jb20vY3JsL0tQTkNvcnBvcmF0 ZU1hcmtldENTUE9yZ2FuaXNhdGllQ0FHMi9MYXRlc3RDUkwuY3JsMA4GA1UdDwEB /wQEAwIDqDCBpwYDVR0gBIGfMIGcMIGZBgpghBABh2sBAgUGMIGKMDcGCCsGAQUF BwIBFitodHRwczovL2NlcnRpZmljYWF0Lmtwbi5jb20vcGtpb3ZlcmhlaWQvY3Bz ME8GCCsGAQUFBwICMEMaQU9wIGRpdCBjZXJ0aWZpY2FhdCBpcyBoZXQgQ1BTIFBL SW92ZXJoZWlkIHZhbiBLUE4gdmFuIHRvZXBhc3NpbmcuMB8GA1UdIwQYMBaAFCbQ ZRPx7npvYQgo3k2YBxJIeLTvMB0GA1UdDgQWBBR2d+mfOZmoJhXugPl6CU5A1zJg vzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwbQYDVR0RBGYwZIIWbGFi LWRvd25sb2FkLm5ldHBvcy5ubKBKBgorBgEEAYI3FAIDoDwMOjIuMTYuNTI4LjEu MTAwMy4xLjMuNS45LjEuMTBiZmI3YzM5MTcxMTJmYWExNTQ1ZGE1NjIwMTNkMGUw NwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcDMubWFuYWdl ZHBraS5jb20wDQYJKoZIhvcNAQELBQADggIBAJ6ranPpUow7EnsQcVi9s+APbf6P Zs5xNuuKmCxPmrDOZqRXlLMue48GXRpvgBL8Tw3oNXTgxuIjT+Ix7GTyUdsGAkgm lAwdb1Qu4qkW/N2/eLB7WDMEaPz4C0jGWwU4kkRQtgI01a4ZKu08QeXliyG72vri gOXnwZ5wsoxzUT2sjvg3UQYmb+VCYYqHh2O93kcG6493XddIonInfjZpW69kGLq8 CdKteFJiSEhXFU2txtuX6t7UAYMtpMjKsyQ5SAhK7hz4sjSxrXP/YLRC5Ca5n13I LCtoL4ZLgsnv8Vv3eLSVzqeLs8aMi62OUcD0tzxJqTRoAhB0+m4m1iSrER+cwzR0 rSdhUzJiiOl7DRmjW2l7UawgRTIplMq/EUKs9SKLUrvcNMjmNYTInACvVnJXPxKx 6Bp07TopgaumIGUTKcPEOkdEWbBmVCLgb2z87L8axI+eorOkTIq6ZYns6merEv6+ oKAwoFwzOZLIQIsSUWny9DI8ACFOy8zSSWKylGbV5I8GgAY2wmYJwi4Y9RQopLPT GtpUOAwB3IkSSK4xrb4Z5zzI/AC0zGK/jrXD1bm55KVgS/W9oAV4jEvD+rrxAreR 7VBM0LiPXrxsaum2hYNsm3gTUZ3d+ZineEA/cpv3kYZfG0Wb+S08yhFkex+UphAZ 1tYi/ZpdXq3we68w -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2so16qKl9Kvl6qMs3A2I Sm/lOgd3svmxKcI/2BVRNAWCqmStwS7uVi8JRokdO/6+KGVJIqT2MjPLPm5/nVug n+XLwUthrYSt5dpWeElYchJTPPD1si1cwEZz6MT46krIqu00iU25a4dqta2mknLk B53XxZZhkNTInMhzIsSh/P6dKm3oParq13T+QUvxfxJnuW8SGdYZYdPMWCNA/jqn hoKeOl+tQsNgirQA4rK/wQNNx/EKEoWcp7EtiD5M4NENvXFE89yJ3YhisGoRt1f5 qhM/kZWG0Cw/lQw0xN8CjrdUMVMBpdL5qVLc3TvjDURg59J147eRqYuTlOMpNylr TwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 47702065575946465571444062141778866132 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apeldoorn' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dienst voor het kadaster en de openbare registers' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kadaster Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000001802327497000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lab-download.netpos.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27619664251515099224608858490808223155463757282458120080837024252843454919033000656278650239933274749226691688429113664571313424105099543022496089881618929259322977620269158401503989005240887930937268426539102564468999505472850750091650337087946360121573957929225071051922006424635577562660897350031291818060645142437566998238466415939931156868816069377989502615474641666095787183847258723532939352054922094459053187160120086494564077325785134912242615428500368070220337082635091345822130933233587457722329221067567108344580173775025177977366838973107070797355955779912505574659588479657428950855143569365778116995919 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7677e99f3999a82615ee80f97a094e40d73260bf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab-download.netpos.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.10bfb7c3917112faa1545da562013d0e' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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