www.mijnreade.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 4b:38:8e:e2:f5:e0:59:8f:4a:1f:e9:3b:d3:df:59:89 was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Reade

Company registration number: 00000003343213790000
Organization: Reade
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 4b:38:8e:e2:f5:e0:59:8f:4a:1f:e9:3b:d3:df:59:89
Serial Number (int): 99985766391770137299589574803924670857
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 56:df:5c:70:c3:4f:d2:e9:f3:2b:9a:84:dc:eb:0d:71:0d:1b:29:1e
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): 8b:de:a9:1f:1b:6c:e8:24:cc:c2:23:99:81:e1:c9:53:43:b8:cb:0a
Fingerprint (sha256): b2:7b:b4:ad:97:2e:94:f7:c7:e4:07:47:d0:7b:c1:a0:16:97:4a:87:33:1c:2a:52:ff:76:5e:57:3a:09:be:76


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on www.mijnreade.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.mijnreade.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGpzCCBI+gAwIBAgIQSziO4vXgWY9KH+k7099ZiTANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE1MDEwOTAwMDAwMFoXDTE4MDEwODIzNTk1OVowgYMxCzAJBgNV BAYTAk5MMRYwFAYDVQQIDA1Ob29yZC1Ib2xsYW5kMRIwEAYDVQQHDAlBbXN0ZXJk YW0xDjAMBgNVBAoMBVJlYWRlMR0wGwYDVQQFExQwMDAwMDAwMzM0MzIxMzc5MDAw MDEZMBcGA1UEAwwQd3d3Lm1pam5yZWFkZS5ubDCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKrx4n7E2J/oyX4Xn1zNgdjSIjwxPrGaIr6t8rFypODoTTid YnY6KzHwgxxYTAuImG65tSRDdDbtD76xdGUHFBXPbnlL3AcHE8r674UvhwvyGilF 2YqtteCo2b+VPECZ/hjnHTmaQH/nlJhkt9cDkC4Pdk7HCRyUeR9l1HCutzwj7NW+ RP/x7BeIBR8M2iQ6zzDsTZ9hxx4+fd+Cqjxuv3dYwuZtT+s0r+XDPuW0Hor/hQL5 BXeKehxr4yBNAVHQv2GA8QfvPPWVEMcnbRf84fYfux5xzJieHPEZlJrO4ieL9UG9 UsU760kzSY5B8ez8QGz2bDPp/EnCD4hmjPPCMaECAwEAAaOCAjEwggItMAwGA1Ud EwEB/wQCMAAwYgYDVR0fBFswWTBXoFWgU4ZRaHR0cDovL2NlcnQubWFuYWdlZHBr aS5jb20vY3JsL0tQTkNvcnBvcmF0ZU1hcmtldENTUE9yZ2FuaXNhdGllQ0FHMi9M YXRlc3RDUkwuY3JsMA4GA1UdDwEB/wQEAwIDqDCBpwYDVR0gBIGfMIGcMIGZBgpg hBABh2sBAgUGMIGKMDcGCCsGAQUFBwIBFitodHRwczovL2NlcnRpZmljYWF0Lmtw bi5jb20vcGtpb3ZlcmhlaWQvY3BzME8GCCsGAQUFBwICMEMaQU9wIGRpdCBjZXJ0 aWZpY2FhdCBpcyBoZXQgQ1BTIFBLSW92ZXJoZWlkIHZhbiBLUE4gdmFuIHRvZXBh c3NpbmcuMB8GA1UdIwQYMBaAFCbQZRPx7npvYQgo3k2YBxJIeLTvMB0GA1UdDgQW BBRW31xww0/S6fMrmoTc6w1xDRspHjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwZwYDVR0RBGAwXoIQd3d3Lm1pam5yZWFkZS5ubKBKBgorBgEEAYI3FAID oDwMOjIuMTYuNTI4LjEuMTAwMy4xLjMuNS45LjEuODU1M2RmNTJmNGM5ODEzOGI4 OGE1YzU0YjQ1ZTVjNDcwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRw Oi8vb2NzcDMubWFuYWdlZHBraS5jb20wDQYJKoZIhvcNAQELBQADggIBAHRsJBX1 5kI+IvTbCGyBrgH5cTfOEo+JmflJi5f/fAl9KV74RHnhJfoqKfHQETj7GtbO91MX oxy2mbY7B/yTDM4+zgW6S7hxsZ2d9h3wWUz92+41DHQJlddjmjbYwcdX7l1c5O+2 dJSluQNowtmeH3YxDytaxsv+4RB86NHhPtRqCRFbBRrRLgCiHtbWXVpBZCTWe9K0 i2YK653t9goWtnjFmcEf77JxA/msKMVc+97oM5AnR6SGDumrRPAxMhCibx5I8iLx pXfZ2/6xxAba6RZ4lcjlGrjmia7zAoCvDdB++DdnNxHHdERVWk7uD2gNtVTFiCAe b743oBmGu2Y7pZssgbGbY0h7tNPpGkZ/lXrJOhreYVfESDfEe8lazzstaai7mLEF /ZrYDOONZqkVLlzyyJEzIxnR19EUekRty6BQxjivAGFOAsjGEpVW9tFlzcAqQQR8 9FOMPS+2KnPpYe7F1otVI8cdHV6fn0VBGfTVTjYzXfd3Yz6v//B8qdGf6PrHIPg7 kyLJUME8Qz0ggNUiGFksQlG2nw+2rzk73WS0snJW6/B118a2JaKwQa9Ha5wm5jIH 7xwKU2s1n+/zKhTnDG+pFFg+2vET/ZAJ28KDhcVFsRHf5TABwn/pXT9WlGoRWDUh zlBaDdDQt7voBUIaqtLA/s1+Ft840F5r/LoD -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvHifsTYn+jJfhefXM2B 2NIiPDE+sZoivq3ysXKk4OhNOJ1idjorMfCDHFhMC4iYbrm1JEN0Nu0PvrF0ZQcU Fc9ueUvcBwcTyvrvhS+HC/IaKUXZiq214KjZv5U8QJn+GOcdOZpAf+eUmGS31wOQ Lg92TscJHJR5H2XUcK63PCPs1b5E//HsF4gFHwzaJDrPMOxNn2HHHj5934KqPG6/ d1jC5m1P6zSv5cM+5bQeiv+FAvkFd4p6HGvjIE0BUdC/YYDxB+889ZUQxydtF/zh 9h+7HnHMmJ4c8RmUms7iJ4v1Qb1SxTvrSTNJjkHx7PxAbPZsM+n8ScIPiGaM88Ix oQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 99985766391770137299589574803924670857 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reade' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003343213790000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.mijnreade.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21579789658441967348298139560453470894203200521857039078865600050154462940472104019868409021127250993722121562323761382219720547192916768420527142474323332807912781061966331727379924903993206826892518204299356674997738261141862441707595838782919504375678164232894567781378297251569157388030564828666872460815884911467886629901113887452707253945313554257709790525242706015590343766061514016535507007214180447432930354911705385107572922102739702517137859465057512857696916135635795122953066968384117709152761895882899457485919546864950122413267882995646551889954720266842602526768127891331369824644365357670427598664097 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 56df5c70c34fd2e9f32b9a84dceb0d710d1b291e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mijnreade.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.8553df52f4c98138b88a5c54b45e5c47' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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