mijnsubsidies.amsterdam.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 4a:e2:08:b3:4a:e4:01:b0:fe:9f:2a:6f:dc:27:c8:10 was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Gemeente Amsterdam

Company registration number: 00000001002564440000
Organization: Gemeente Amsterdam
Organization unit: DMO
State / Province: Noord Holland
Locality: Amsterdam
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Noord Holland
Locality: Amsterdam
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 4a:e2:08:b3:4a:e4:01:b0:fe:9f:2a:6f:dc:27:c8:10
Serial Number (int): 99536507242408098706601975900373764112
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6f:d4:38:bd:28:6d:8f:ba:4a:cb:a4:a0:f1:9e:b8:30:88:f3:ac:47
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): 9f:e3:27:49:3c:6b:e2:ac:7c:f5:44:5f:24:9b:4a:fc:0b:fe:57:b2
Fingerprint (sha256): 79:3f:a0:f8:58:94:ab:5c:e3:b4:4e:63:be:37:c3:3e:70:b6:75:b1:31:04:d1:1f:e5:3c:b1:23:58:51:0b:07


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on mijnsubsidies.amsterdam.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: mijnsubsidies.amsterdam.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIG1jCCBL6gAwIBAgIQSuIIs0rkAbD+nypv3CfIEDANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE0MTEwNDAwMDAwMFoXDTE3MTEwMzIzNTk1OVowgagxCzAJBgNV BAYTAk5MMRYwFAYDVQQIDA1Ob29yZCBIb2xsYW5kMRIwEAYDVQQHDAlBbXN0ZXJk YW0xGzAZBgNVBAoMEkdlbWVlbnRlIEFtc3RlcmRhbTEMMAoGA1UECwwDRE1PMR0w GwYDVQQFExQwMDAwMDAwMTAwMjU2NDQ0MDAwMDEjMCEGA1UEAwwabWlqbnN1YnNp ZGllcy5hbXN0ZXJkYW0ubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHDx7PhfychhUalTMsa8lm7mRKIwX3DaiT7XUL6fHBQ8OsENqYiocRKHJtBWcM 45ykbg+xn+JX4ZOkyUmMwiSWCHCcd/C3z58F1V/UjQnorVuVngibhRSUjtxGlxZg JJdgruYG1NeOwu2lJxseHb9r4d+mjc/lvNH1D5RnENDJUVwD93Ri1nsAs7oTx2wZ SY0pGEpi2wcak2UX6HU++XAZ8c585GZ3bi0Oyl0a44tXzUjUYBvyw5WPFB20abjA smkPRPBPYPtpq/AeaSLlCrq/M21IICq+7rTPuyl3+CjiSVhZgfn2ZMidEDLN1fp1 hofSlS6d1JzJJ+O0fK2K63oLAgMBAAGjggI7MIICNzAMBgNVHRMBAf8EAjAAMGIG A1UdHwRbMFkwV6BVoFOGUWh0dHA6Ly9jZXJ0Lm1hbmFnZWRwa2kuY29tL2NybC9L UE5Db3Jwb3JhdGVNYXJrZXRDU1BPcmdhbmlzYXRpZUNBRzIvTGF0ZXN0Q1JMLmNy bDAOBgNVHQ8BAf8EBAMCA6gwgacGA1UdIASBnzCBnDCBmQYKYIQQAYdrAQIFBjCB ijA3BggrBgEFBQcCARYraHR0cHM6Ly9jZXJ0aWZpY2FhdC5rcG4uY29tL3BraW92 ZXJoZWlkL2NwczBPBggrBgEFBQcCAjBDGkFPcCBkaXQgY2VydGlmaWNhYXQgaXMg aGV0IENQUyBQS0lvdmVyaGVpZCB2YW4gS1BOIHZhbiB0b2VwYXNzaW5nLjAfBgNV HSMEGDAWgBQm0GUT8e56b2EIKN5NmAcSSHi07zAdBgNVHQ4EFgQUb9Q4vShtj7pK y6Sg8Z64MIjzrEcwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHEGA1Ud EQRqMGiCGm1pam5zdWJzaWRpZXMuYW1zdGVyZGFtLm5soEoGCisGAQQBgjcUAgOg PAw6Mi4xNi41MjguMS4xMDAzLjEuMy41LjkuMS5mM2M5N2U3ZTk2ZDc0YTY3YjM4 OTI3NTYwMjY0ZTY2YzA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAGGG2h0dHA6 Ly9vY3NwMy5tYW5hZ2VkcGtpLmNvbTANBgkqhkiG9w0BAQsFAAOCAgEAaX+S8W5P 4J64/4RVCr6QWuoYkGrCMWfWxj6e2n3I9MmeDoCEU5oKrVcTwebA0I/J8Wo0wiD2 K+SG8Kt0z9w/za41D7Ir/qar99FFOzmS9B2uANF/tAjXy8s+VHNzw+BVRtpdmGxT 3eyfQt8mP39tgF/ZpQUomWe0lMXHJCnU3k0REin6xZhbMeyrJhg0guR+Ce04Mi/U 3xzLxRSOj1z/7ErqbV9BgMHyZMXJGcHbXVthafRhxYjgx7hAuhpffWdvRJZOy4jI 1f0MkAnrGYHiQHAD9UebxORdBrmG8hOP+aAoLx6PNX0hSnLAqYsz5wQvYIVmKR4h 4Lps3fjuujlNUunJmpjmThf6Dwx+Ns5RVDdm3UpGez+6zmHfNEgyG3RPxi1Y5zod iwp8Ab/rErlZs2VPC+xD7udkjJRE/eqfImvhW3ItENk5rP1+oJ1W4G0fA/o7uW7a cC8Dus5TLEQNX4JjHBO54ayOu9nwvdOvS7aNb5I3UkzrJ3gyyaW9SOMZrLcxM1cU WXsrlahV0ug3cAEXOa6bCb6xw0OofWwgM3y3/Pcad2+dnWfCRfQpuvgMk9k0uSOA PwQNWpeC1S+tkU7H6GgHX72ASk3FkQk09sLDhG36bXPikmK2Dn7tPxeUlXWEUpD6 M6y2oDHlQFMG3a0M/0aH4bZIKF7HpCYDFXA= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw8ez4X8nIYVGpUzLGvJ Zu5kSiMF9w2ok+11C+nxwUPDrBDamIqHEShybQVnDOOcpG4PsZ/iV+GTpMlJjMIk lghwnHfwt8+fBdVf1I0J6K1blZ4Im4UUlI7cRpcWYCSXYK7mBtTXjsLtpScbHh2/ a+Hfpo3P5bzR9Q+UZxDQyVFcA/d0YtZ7ALO6E8dsGUmNKRhKYtsHGpNlF+h1Pvlw GfHOfORmd24tDspdGuOLV81I1GAb8sOVjxQdtGm4wLJpD0TwT2D7aavwHmki5Qq6 vzNtSCAqvu60z7spd/go4klYWYH59mTInRAyzdX6dYaH0pUundScySfjtHytiut6 CwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 99536507242408098706601975900373764112 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gemeente Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DMO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000001002564440000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mijnsubsidies.amsterdam.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25128878812724032033477252279522376339046422312870776681790884326433001219442945321010291005484982007821058850979672531615546853266028221991771988755058387147378480497564109469898022985314335366247519161996381297287229235714100841410179273631391622638906057249209066437412903178616959869635130987076219270540632762264795208084968517593755237982753034453979505338394217626846944977466079150712612242871120421297990721219439035494854568460498389930519931050995201654550555003554435530809310117784354302752499189604036428946135797047747629375513574745471675429549508248903836010760422292017305205960742623566866745621003 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6fd438bd286d8fba4acba4a0f19eb83088f3ac47 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnsubsidies.amsterdam.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.f3c97e7e96d74a67b38927560264e66c' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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