afspraak.winsum.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 45:58:b2:19:b9:3e:72:9f:68:c2:1b:c7:62:6f:57:c2 was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Gemeente Winsum

Company registration number: 00000001009845057000
Organization: Gemeente Winsum
Organization unit: IA BMW
State / Province: Groningen
Locality: Winsum
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Groningen
Locality: Winsum
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 45:58:b2:19:b9:3e:72:9f:68:c2:1b:c7:62:6f:57:c2
Serial Number (int): 92177266139653994423742199336522438594
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7c:1e:6d:76:48:78:cd:82:51:79:5f:12:92:64:8b:a9:43:23:a0:da
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): 24:01:b3:44:ed:09:8f:42:a4:64:78:a0:0a:87:a9:82:9f:e0:ff:ae
Fingerprint (sha256): f8:63:2b:9b:83:5f:50:58:3e:95:d0:0f:0d:eb:83:8f:c5:0a:d1:02:fd:fc:a2:58:b7:73:8f:60:f7:f3:59:ae


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on afspraak.winsum.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: afspraak.winsum.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGvzCCBKegAwIBAgIQRViyGbk+cp9owhvHYm9XwjANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE0MTAxMzAwMDAwMFoXDTE3MTAxMjIzNTk1OVowgZkxCzAJBgNV BAYTAk5MMRIwEAYDVQQIDAlHcm9uaW5nZW4xDzANBgNVBAcMBldpbnN1bTEYMBYG A1UECgwPR2VtZWVudGUgV2luc3VtMQ8wDQYDVQQLDAZJQSBCTVcxHTAbBgNVBAUT FDAwMDAwMDAxMDA5ODQ1MDU3MDAwMRswGQYDVQQDDBJhZnNwcmFhay53aW5zdW0u bmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGSfN91CVv7tH3/uh tL8c9IhtXuE+TzzocAXPjDbGXr1UTLZ+R97WoK3/j5A9B79q35gSg4BWwfO05YJn scDcpzcaq5coTF5LD0R7yofM3dPb7OJg3tp2uHDQauVQmDjeGDTEiUdr95bcSTKM IrEJe8uJdUV58FnFkAje5A9jdhZM8aAkLg8pi7aQTvKdrzv7/lT8ir4gPncQktTy vCLQwCwyRet9M12MbApqZR6Te3z8ME5NFNHespo7RKTAuB9a3CenNQu8PhD8M67D wlmQOdRgDFzNGDmtjK08CsTsNQoOCAWHO1uQaCE/bkkizrPwgkKq8OtFnpx8NsxJ 76ulAgMBAAGjggIzMIICLzAMBgNVHRMBAf8EAjAAMGIGA1UdHwRbMFkwV6BVoFOG UWh0dHA6Ly9jZXJ0Lm1hbmFnZWRwa2kuY29tL2NybC9LUE5Db3Jwb3JhdGVNYXJr ZXRDU1BPcmdhbmlzYXRpZUNBRzIvTGF0ZXN0Q1JMLmNybDAOBgNVHQ8BAf8EBAMC A6gwgacGA1UdIASBnzCBnDCBmQYKYIQQAYdrAQIFBjCBijA3BggrBgEFBQcCARYr aHR0cHM6Ly9jZXJ0aWZpY2FhdC5rcG4uY29tL3BraW92ZXJoZWlkL2NwczBPBggr BgEFBQcCAjBDGkFPcCBkaXQgY2VydGlmaWNhYXQgaXMgaGV0IENQUyBQS0lvdmVy aGVpZCB2YW4gS1BOIHZhbiB0b2VwYXNzaW5nLjAfBgNVHSMEGDAWgBQm0GUT8e56 b2EIKN5NmAcSSHi07zAdBgNVHQ4EFgQUfB5tdkh4zYJReV8SkmSLqUMjoNowHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGkGA1UdEQRiMGCCEmFmc3ByYWFr LndpbnN1bS5ubKBKBgorBgEEAYI3FAIDoDwMOjIuMTYuNTI4LjEuMTAwMy4xLjMu NS45LjEuN2VmOGEzNjk2ZDM4ZmVkMGYzOTFmN2I4YmFkNjI5ODkwNwYIKwYBBQUH AQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcDMubWFuYWdlZHBraS5jb20w DQYJKoZIhvcNAQELBQADggIBAJ4LXy9K/2eYajtCDdJvX+7DEgy0C5WZD9FbWoMh tWJe83JVO3o+N9Tryc+/g0LaE4o8wKPiwrDUO3qoZhRF3n37SL8p5Ne/e8YSO8d8 2OojQQjN3EkdoyQbc+t5M0u40bmgV9xFE+plJ5NOZ3bXGQ/ILOUYpy/Msw+Eioq2 xQBrKHQF+pnt3j1jdRoC+YOPzqfG6s3tMX2rA07LMszmp16fU/WyKnnkYWg8gXqo 5+ABUsmLBzCvDSo4IOEEK6D9akvO+ClRinYy6VaZ5trdLgyOAp9/QDbUGDsoCJIk eSmkNEkZIFHu+0fLkfSERriSEr0hw/6i44mXBzN1ksORtL2OW3hW35kwWLSAntsf Fe3+zXTGf2rb05/8cYWoQ5jSEANbZKg3DE3BiqrDpDtK418mu2RIa2Fn6GDUDBh1 tG7iPzc8Qmx1sbwKCpCbJhU/VfMkO16jVWuwQMMp6kx7jfprhJxGIv6C+F7V0Atb /DbWBTZZyD02gNPg16UeDlEFA33D6BPlhHyFYmAZDoNQB+fO0TmzEnAL6j2up4Dz x0RpwdRuauMJNzsN7wMddUEG/QSDOCz9TU9pFC3+VDY+hDoTO5Jupb0+6sQTyHgE ZjrikC3TJdwXbl0S/DrzUSJQDaMyt+eEXfl1p31PElIuAwL6W3obv1EbpF4WeM4x tmV4 -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xknzfdQlb+7R9/7obS/ HPSIbV7hPk886HAFz4w2xl69VEy2fkfe1qCt/4+QPQe/at+YEoOAVsHztOWCZ7HA 3Kc3GquXKExeSw9Ee8qHzN3T2+ziYN7adrhw0GrlUJg43hg0xIlHa/eW3EkyjCKx CXvLiXVFefBZxZAI3uQPY3YWTPGgJC4PKYu2kE7yna87+/5U/Iq+ID53EJLU8rwi 0MAsMkXrfTNdjGwKamUek3t8/DBOTRTR3rKaO0SkwLgfWtwnpzULvD4Q/DOuw8JZ kDnUYAxczRg5rYytPArE7DUKDggFhztbkGghP25JIs6z8IJCqvDrRZ6cfDbMSe+r pQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 92177266139653994423742199336522438594 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Groningen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Winsum' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gemeente Winsum' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IA BMW' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000001009845057000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'afspraak.winsum.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26648686980579651012950356647812179926008722776079066083673573202277787442210760625042419298344524645490889111187434391019653001217268255438775193495153099646807614723636230134747602878513383804060183720929846499969199742020009845593819546988871422414982263800600015934909637950114413184451627713583577389305249324257109055568813092721152328471965760157199581338497234119765078605567144670392651124329229685008610353727770393348294270652674114148094571700619196456988548036941466970617328184639491550948788244876537292090444573523863385581222606587393913655241904889514377909767069464116008009519024683287615632288677 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7c1e6d764878cd8251795f1292648ba94323a0da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afspraak.winsum.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.7ef8a3696d38fed0f391f7b8bad62989' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 009e0b5f2f4aff67986a3b420dd26f5feec3120cb40b95990fd15b5a8321b5625ef372553b7a3e37d4ebc9cfbf8342da138a3cc0a3e2c2b0d43b7aa8661445de7dfb48bf29e4d7bf7bc6123bc77cd8ea234108cddc491da3241b73eb79334bb8d1b9a057dc4513ea6527934e6776d7190fc82ce518a72fccb30f848a8ab6c5006b287405fa99edde3d63751a02f9838fcea7c6eacded317dab034ecb32cce6a75e9f53f5b22a79e461683c817aa8e7e00152c98b0730af0d2a3820e1042ba0fd6a4bcef829518a7632e95699e6dadd2e0c8e029f7f4036d4183b280892247929a43449192051eefb47cb91f48446b89212bd21c3fea2e3899707337592c391b4bd8e5b7856df993058b4809edb1f15edfecd74c67f6adbd39ffc7185a84398d210035b64a8370c4dc18aaac3a43b4ae35f26bb64486b6167e860d40c1875b46ee23f373c426c75b1bc0a0a909b26153f55f3243b5ea3556bb040c329ea4c7b8dfa6b849c4622fe82f85ed5d00b5bfc36d6053659c83d3680d3e0d7a51e0e5105037dc3e813e5847c856260190e835007e7ced139b312700bea3daea780f3c74469c1d46e6ae309373b0def031d754106fd0483382cfd4d4f69142dfe54363e843a133b926ea5bd3eeac413c87804663ae2902dd325dc176e5d12fc3af35122500da332b7e7845df975a77d4f12522e0302fa5b7a1bbf511ba45e1678ce31b66578