bhgtest.waternet.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 37:e8:3f:48:36:5f:23:a7:99:e8:a9:f5:7d:5f:06:3c was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Stichting Waternet

Company registration number: 00000003412165930000
Organization: Stichting Waternet
Organization unit: ICT
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 37:e8:3f:48:36:5f:23:a7:99:e8:a9:f5:7d:5f:06:3c
Serial Number (int): 74313436152410390959536964059841627708
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 0c:65:3b:24:71:0c:e2:fe:d3:49:61:13:2f:84:bc:ed:94:d2:1b:a0
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): a3:04:02:ee:37:64:eb:88:b5:7d:86:4d:5f:d3:d0:55:27:b4:80:70
Fingerprint (sha256): 19:1b:7c:d8:e8:65:af:00:87:f1:a2:13:4f:16:ea:d0:3f:34:45:76:ae:88:7b:4b:bc:a3:df:4f:f9:e4:e8:af


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on bhgtest.waternet.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: bhgtest.waternet.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHyDCCBbCgAwIBAgIQN+g/SDZfI6eZ6Kn1fV8GPDANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE0MDIwNjAwMDAwMFoXDTE3MDIwNTIzNTk1OVowgaExCzAJBgNV BAYTAk5MMRYwFAYDVQQIDA1Ob29yZC1Ib2xsYW5kMRIwEAYDVQQHDAlBbXN0ZXJk YW0xGzAZBgNVBAoMElN0aWNodGluZyBXYXRlcm5ldDEMMAoGA1UECwwDSUNUMR0w GwYDVQQFExQwMDAwMDAwMzQxMjE2NTkzMDAwMDEcMBoGA1UEAwwTYmhndGVzdC53 YXRlcm5ldC5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALoPXDQ6 NItjKShp1SIXO4A09Uk/YJOlMfyNnpnxaX0HT6WEJ3Mc0R6LAxT3u0gna2IxXYAD yrN+Sgq6w1nuoajTCdmpRkR9IsPAZEQUcCB5rLv3iM4BcvHSE3z+B+o/qOvojuaX 2IxLUglk8hoecV+NcqLl8tTkbX6oDWLf9XZ99EPhM5ciyD2Bz2yjnJHsiULB16/Q 7JNihOzZfpgiwWaEbPbaE/XZAdBI4AIfwbxvfHmYMp5kThyvSTOxWyI+FYkbNblJ olNsMAi+gcRWjrf1h7okKAKqTIbRt12dG92/pZLIeMVN+kg107eMEnQyx0gBXUeH JTCDlQgOZholsJvf5w7hrPa+yLB40ra8A7uMisZkm6uE9XbnQBQBC7lTRdieeh37 7AhUmYhiCdAGm23J3bHALZeMA8ak8W9AjbqrIUrcTS2ox3nXr4PPPXqdjCdq9Xxq sY4GqQh+Dk50JrNhgLozS8C4CQDobvJStwP5ECVzqmJ/7aJb3MG8ZewK7arv2Hj2 q31+hi1PREl2wV3PiaZMFggRyR6LvV18EyFJ9XQU1J7BTfCdu7nuidhpyqjvcFz8 WC3yE6qiLNSPLaBIm8zQkoRfodbsGfy0PwBlI+9OixQtPM/odcDIovGXkf9rYEV/ P1Cm4WR7uvICIiFTDQOpLB6S/1aKVx/QKXfDAgMBAAGjggI0MIICMDAMBgNVHRMB Af8EAjAAMGIGA1UdHwRbMFkwV6BVoFOGUWh0dHA6Ly9jZXJ0Lm1hbmFnZWRwa2ku Y29tL2NybC9LUE5Db3Jwb3JhdGVNYXJrZXRDU1BPcmdhbmlzYXRpZUNBRzIvTGF0 ZXN0Q1JMLmNybDAOBgNVHQ8BAf8EBAMCA6gwgacGA1UdIASBnzCBnDCBmQYKYIQQ AYdrAQIFBjCBijA3BggrBgEFBQcCARYraHR0cHM6Ly9jZXJ0aWZpY2FhdC5rcG4u Y29tL3BraW92ZXJoZWlkL2NwczBPBggrBgEFBQcCAjBDGkFPcCBkaXQgY2VydGlm aWNhYXQgaXMgaGV0IENQUyBQS0lvdmVyaGVpZCB2YW4gS1BOIHZhbiB0b2VwYXNz aW5nLjAfBgNVHSMEGDAWgBQm0GUT8e56b2EIKN5NmAcSSHi07zAdBgNVHQ4EFgQU DGU7JHEM4v7TSWETL4S87ZTSG6AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMGoGA1UdEQRjMGGCE2JoZ3Rlc3Qud2F0ZXJuZXQubmygSgYKKwYBBAGCNxQC A6A8DDoyLjE2LjUyOC4xLjEwMDMuMS4zLjUuOS4xLmUxYTI3NzZkNzczZDdhZTFm ZmIzYjQ5MzY0YzM5YThjMDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAYYbaHR0 cDovL29jc3AzLm1hbmFnZWRwa2kuY29tMA0GCSqGSIb3DQEBCwUAA4ICAQAIKWeb ZPXg5zzL79UHfq/sZgwVJBesHEqjH8EYynulpvtM+LJZSJ/NdhRIR0X8LlYChi49 4D1utb2ATc87IzUKOmhNNspLkTYpeGdQZtu4atINJcf5lnPr4VmFOIhyjjvjtlmW /CCouVN/q/QiVTRkW+wKmwckggCSnTdSA1bzEFedZpyLgDO3I9WBccQnlMuveEzU v5Z9cPLG+Pa4EX8iHqGQ/hnyPEMAu0ye0Ma92cpf/Wsj6Bil4fqVLVqJAIxljitO RHyS2zmxPrIloysaOh2rut1H78WpJstS4Y4MLfB2wASnB6pBVXTRcAG5luOCMAbk Zu4cdNXakb5iZGpju8hgJ72tJvAurjwdF3mDD8f5+mLlvVg2wF6/froMIFFwm6HS lGgROBFBRynME1cvW69S1c6BUofJ8FrbofFyPqQbM38qoMdzSNK3C5d+6lA959Tt k+CNybJqv5V6Uj2K0n/kyrEFuciKD4Ewt2qRrPGxKl+VMiM2cgcfCPKX3ah3kbH9 9si+Gh97xYSyp7uFmg7D/e/AzQLisQXWJ9N2K+jZURVpSXsX44OgOVSlq8gxx55G L4MJZoKNtWh9dkWFhKhcGkW5sSdyS4lHNO5Ql8ZBKjxUOmMiB5a/ZC4eMhpWzahF nhARp1XIZjGvjkb3dc601cUU2bmQyL8KuyHSgQ== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAug9cNDo0i2MpKGnVIhc7 gDT1ST9gk6Ux/I2emfFpfQdPpYQncxzRHosDFPe7SCdrYjFdgAPKs35KCrrDWe6h qNMJ2alGRH0iw8BkRBRwIHmsu/eIzgFy8dITfP4H6j+o6+iO5pfYjEtSCWTyGh5x X41youXy1ORtfqgNYt/1dn30Q+EzlyLIPYHPbKOckeyJQsHXr9Dsk2KE7Nl+mCLB ZoRs9toT9dkB0EjgAh/BvG98eZgynmROHK9JM7FbIj4ViRs1uUmiU2wwCL6BxFaO t/WHuiQoAqpMhtG3XZ0b3b+lksh4xU36SDXTt4wSdDLHSAFdR4clMIOVCA5mGiWw m9/nDuGs9r7IsHjStrwDu4yKxmSbq4T1dudAFAELuVNF2J56HfvsCFSZiGIJ0Aab bcndscAtl4wDxqTxb0CNuqshStxNLajHedevg889ep2MJ2r1fGqxjgapCH4OTnQm s2GAujNLwLgJAOhu8lK3A/kQJXOqYn/tolvcwbxl7Artqu/YeParfX6GLU9ESXbB Xc+JpkwWCBHJHou9XXwTIUn1dBTUnsFN8J27ue6J2GnKqO9wXPxYLfITqqIs1I8t oEibzNCShF+h1uwZ/LQ/AGUj706LFC08z+h1wMii8ZeR/2tgRX8/UKbhZHu68gIi IVMNA6ksHpL/VopXH9Apd8MCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 74313436152410390959536964059841627708 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stichting Waternet' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003412165930000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bhgtest.waternet.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759058578035661744271017219309498316114356794809556161835613127380287181023527448251485150614636470948214638272770281378558766635880557274253077666109655948982164077905692495329357280971815986847828459473138307288892617795759577182981781958166625521599499625862255820643067012045748959569976541612583201702727898304470590867510391491651855748056735566435747944197114952014682023385453891407104028490314198325666621192740340571899156079862358708465745058413037882059211384982887740487183339586109032225151825469569017902834064570635741304954287941689446916776150565002369521110361205637580173244911642219471483226821969740742741469517037015455960597398376020427801549060786980625183928514240834912445696403654084597618316864813822642685169001443074515824412490288353474552268432331100793735512972339723132347191893445605191787506581699839833847906651416887064214805368789577089297791389662278851446075997110485983114394351577955038554302205627170248454682099530667834417985878409494339641952978299653025296486784898704016994671757467403993514582518496637888713512769386671433906311672495942866983568518749664290451054953509371354836300128906330409925979278856404769564966336558282524585954391840188173807486479320401045151642118879171 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0c653b24710ce2fed34961132f84bced94d21ba0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhgtest.waternet.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.e1a2776d773d7ae1ffb3b49364c39a8c' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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