MAIL5.KPNNET.ORG

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 46:bc:f2:a6:b6:76:de:ac:aa:20:9c:fe:a6:78:0e:1f was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Koninklijke KPN N.V.

Company registration number: 00000003020452000000
Organization: Koninklijke KPN N.V.
Organization unit: KPN IT Solutions
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 46:bc:f2:a6:b6:76:de:ac:aa:20:9c:fe:a6:78:0e:1f
Serial Number (int): 94027033065817696354210340585661271583
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1f:46:41:73:c6:b8:8b:0a:68:15:af:23:30:a6:e7:18:69:3b:c8:b0
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): ac:a7:0f:14:1e:6a:8f:4f:14:98:c6:87:b9:bb:96:0f:79:09:0b:bf
Fingerprint (sha256): 25:6d:87:5c:88:c6:8d:e1:d7:0a:41:18:7e:b3:3b:d9:3e:e2:ec:56:ce:19:06:09:68:b2:02:6a:e4:24:c6:ba


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on MAIL5.KPNNET.ORG
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: MAIL5.KPNNET.ORG

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIG1DCCBLygAwIBAgIQRrzyprZ23qyqIJz+pngOHzANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE0MTExNzAwMDAwMFoXDTE3MTExNjIzNTk1OVowgbAxCzAJBgNV BAYTAk5MMRUwEwYDVQQIDAxadWlkLUhvbGxhbmQxFjAUBgNVBAcMDSdzLUdyYXZl bmhhZ2UxHTAbBgNVBAoMFEtvbmlua2xpamtlIEtQTiBOLlYuMRkwFwYDVQQLDBBL UE4gSVQgU29sdXRpb25zMR0wGwYDVQQFExQwMDAwMDAwMzAyMDQ1MjAwMDAwMDEZ MBcGA1UEAwwQTUFJTDUuS1BOTkVULk9SRzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPKOW9PMM7Ck8TQfP2rbNahHiBivmETof7gjvrSj7NwWXuk3eBXW 8ALKa3SZgPV+NKyHTiK5c1mCtbDr+xvd9K1WBllG2FAEpIgbpvGDqagsUD6GKpPd O8qhnx2QQsqohOE92eS8H1aok+6RrJ7wafXDIpj6wHDHEh19j1oCsl+UuKgSq584 tVlFQhnIEmzC/3/3hllSlCZf3LYLXLTCIiSncav9L/NCT5ktbdQdmU4hfOpczXG6 RUQH7AtyzUxTo8P7avSi9MhoUALQZP801e+aQEArky8ACbZJCoopZJYqoZ5AoWjB tr3zQToauyQMaMazrdvYlTVJ60I22GDAJh0CAwEAAaOCAjEwggItMAwGA1UdEwEB /wQCMAAwYgYDVR0fBFswWTBXoFWgU4ZRaHR0cDovL2NlcnQubWFuYWdlZHBraS5j b20vY3JsL0tQTkNvcnBvcmF0ZU1hcmtldENTUE9yZ2FuaXNhdGllQ0FHMi9MYXRl c3RDUkwuY3JsMA4GA1UdDwEB/wQEAwIDqDCBpwYDVR0gBIGfMIGcMIGZBgpghBAB h2sBAgUGMIGKMDcGCCsGAQUFBwIBFitodHRwczovL2NlcnRpZmljYWF0Lmtwbi5j b20vcGtpb3ZlcmhlaWQvY3BzME8GCCsGAQUFBwICMEMaQU9wIGRpdCBjZXJ0aWZp Y2FhdCBpcyBoZXQgQ1BTIFBLSW92ZXJoZWlkIHZhbiBLUE4gdmFuIHRvZXBhc3Np bmcuMB8GA1UdIwQYMBaAFCbQZRPx7npvYQgo3k2YBxJIeLTvMB0GA1UdDgQWBBQf RkFzxriLCmgVryMwpucYaTvIsDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwZwYDVR0RBGAwXoIQTUFJTDUuS1BOTkVULk9SR6BKBgorBgEEAYI3FAIDoDwM OjIuMTYuNTI4LjEuMTAwMy4xLjMuNS45LjEuNGNjNDE4NWE5ZDliMjk1YmM1ZDI0 OTZmMWY5ZjYzYTgwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8v b2NzcDMubWFuYWdlZHBraS5jb20wDQYJKoZIhvcNAQELBQADggIBAM7yrKg2+Clu 6AuDzh2JVTBP1twhp8sunl0yKKvZsMqzAYhp1ZaUgt3P4WXwxR80oYZQAalIBM2l IAOdgYByOlUY6JHgQ0J5iZ8gD2qc09RJbqFp4N+X0VLN8DM5Idfcv4IMcjoeeSS+ NsNSZ3FQaRRRTIxLMHaeG+1x3/U2tMBvY+LUPWlez+EkJ1P69qirMq/GxQs8P7Zh IeC/6bs+0grTbeFvSRWmnyTi9WnaxPBE0zbMlI32Hne56UKGnZa8dkbl8ZOtFhZj YyVcg4uB0Dj85TtGSich9M/ktpxvAh4FuiJdqWwu+KRj8rkf2O8up6er6wHhKgtD iNQ0zVC6UR5ZJekhvkipDzg97KNMr3TcQYKZLHcsnJMEZCUcSQcCKgUnTXa5WLlA b19iv68hAacZINamTrOXc63pojyNf8ycZxJNDlHj2tnOdPIM9wkPAo6ZNKDo8SDB bf2am3lybpec448tcj3zzsowMYENenP4Tw2yWyJJSVEPn4KbU6MeGB52GUVfU45d +MKKm+FtiO5Todmz41+NUYH2J/ym9NZJSMi3DiAGw0iZ04b9TKW4hxrmAFCnV4EJ tXaHxtsXd9ADRz0wVCInNU4BWQ9zbSdwC2KAI7nr/OcM0mWnz3Zlh+yk739/+VxM B0N7jvyDb5EJqmK4L2xbvFMnzCXS3coI -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8o5b08wzsKTxNB8/ats1 qEeIGK+YROh/uCO+tKPs3BZe6Td4FdbwAsprdJmA9X40rIdOIrlzWYK1sOv7G930 rVYGWUbYUASkiBum8YOpqCxQPoYqk907yqGfHZBCyqiE4T3Z5LwfVqiT7pGsnvBp 9cMimPrAcMcSHX2PWgKyX5S4qBKrnzi1WUVCGcgSbML/f/eGWVKUJl/ctgtctMIi JKdxq/0v80JPmS1t1B2ZTiF86lzNcbpFRAfsC3LNTFOjw/tq9KL0yGhQAtBk/zTV 75pAQCuTLwAJtkkKiilkliqhnkChaMG2vfNBOhq7JAxoxrOt29iVNUnrQjbYYMAm HQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 94027033065817696354210340585661271583 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koninklijke KPN N.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN IT Solutions' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003020452000000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MAIL5.KPNNET.ORG' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30619869493393831845166696781321775537530826907602612776824838682813677971775645718701576133760426177864895303871240011738710470770448756926654882619699475542293844036199797550350748933871408349267131531094108361951660509050224491228404838921247904191976060052709675326621418860471814729098025924631551080373524706605039158188641830263114453350318132131467816293680981215789632377553986825904351951998177346479508148610626749900998750006539794960812749321708499059819844449470239408495966110155444112797228645539197325238256481787894846838209119552730543234409145309480353253538596947801453298676385481847319635699229 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1f464173c6b88b0a6815af2330a6e718693bc8b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'MAIL5.KPNNET.ORG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.4cc4185a9d9b295bc5d2496f1f9f63a8' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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