sso.ir.rotterdam.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 4d:61:69:99:80:3b:34:51:94:7f:a6:99:02:f1:6c:53 was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set

Gemeente Rotterdam

Organization: Gemeente Rotterdam
Organization unit: Gemeente Rotterdam
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 4d:61:69:99:80:3b:34:51:94:7f:a6:99:02:f1:6c:53
Serial Number (int): 102856350285319303549832033584999918675
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 60:fa:f3:54:8d:37:ba:d3:f5:6b:39:e5:cb:fe:2c:f6:1c:68:71:fd
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): 08:65:c9:a3:0b:8e:a6:44:40:83:d1:74:43:18:ad:a5:92:3a:50:87
Fingerprint (sha256): 91:93:50:af:9a:30:c8:9f:db:2a:86:4b:b6:51:09:59:a1:fc:bf:de:aa:46:0f:7a:dc:3c:a8:98:83:af:61:67


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on sso.ir.rotterdam.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: sso.ir.rotterdam.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGtzCCBJ+gAwIBAgIQTWFpmYA7NFGUf6aZAvFsUzANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE0MDEyNzAwMDAwMFoXDTE3MDEyNjIzNTk1OVowgZAxCzAJBgNV BAYTAk5MMRUwEwYDVQQIDAxadWlkLUhvbGxhbmQxEjAQBgNVBAcMCVJvdHRlcmRh bTEbMBkGA1UECgwSR2VtZWVudGUgUm90dGVyZGFtMRswGQYDVQQLDBJHZW1lZW50 ZSBSb3R0ZXJkYW0xHDAaBgNVBAMME3Nzby5pci5yb3R0ZXJkYW0ubmwwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+R8GJmDBnVHGU+RFDYkQH7lIP9LYT 7NaWyFhSjVChkhQTIyGNRYJfvn+0f9MvjeifAl16u6PdbRLtDTRItvpmZPDz64S0 0hTAUFPKs81zJzSbTd342A1dr8UlfTz0EzC9m0JpMDjiGpHc7rqZz43et/1JBTeO 4283wQOpnvvAUB0RsqJDNVw9D1NV+Ka8OWYuMeSWrT+VLOowEy6x5zn0No7N3RWv fImy8KNHuY0xMDZv1pJGE6BORP2HjHWVviAN5lduzKnIVItOZbEwhbnVq9f9PrWU nhL2XPa9cFw5wb8SFCeFwiFQqamNi1WiTq9QnEABuzOaujCtunm96f0pAgMBAAGj ggI0MIICMDAMBgNVHRMBAf8EAjAAMGIGA1UdHwRbMFkwV6BVoFOGUWh0dHA6Ly9j ZXJ0Lm1hbmFnZWRwa2kuY29tL2NybC9LUE5Db3Jwb3JhdGVNYXJrZXRDU1BPcmdh bmlzYXRpZUNBRzIvTGF0ZXN0Q1JMLmNybDAOBgNVHQ8BAf8EBAMCA6gwgacGA1Ud IASBnzCBnDCBmQYKYIQQAYdrAQIFBjCBijA3BggrBgEFBQcCARYraHR0cHM6Ly9j ZXJ0aWZpY2FhdC5rcG4uY29tL3BraW92ZXJoZWlkL2NwczBPBggrBgEFBQcCAjBD GkFPcCBkaXQgY2VydGlmaWNhYXQgaXMgaGV0IENQUyBQS0lvdmVyaGVpZCB2YW4g S1BOIHZhbiB0b2VwYXNzaW5nLjAfBgNVHSMEGDAWgBQm0GUT8e56b2EIKN5NmAcS SHi07zAdBgNVHQ4EFgQUYPrzVI03utP1aznly/4s9hxocf0wHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMGoGA1UdEQRjMGGCE3Nzby5pci5yb3R0ZXJkYW0u bmygSgYKKwYBBAGCNxQCA6A8DDoyLjE2LjUyOC4xLjEwMDMuMS4zLjUuOS4xLjVi MWVkZGZkZWU4ZTQzYjA5NWJlMjhjZTU1ZDI2YTU4MDcGCCsGAQUFBwEBBCswKTAn BggrBgEFBQcwAYYbaHR0cDovL29jc3AzLm1hbmFnZWRwa2kuY29tMA0GCSqGSIb3 DQEBCwUAA4ICAQC0VwQwyyCYbF0xwQa53w9Yxv+PzcJZJz65yVgtjDM0+6d/PXag 6LinkOPTLRj5x6IJAvKhpEy3f28ArKu2+SQlBV6RhG5aaW6b3bXls+P/jc6OwuVk SDzvEOJ7xZv1C4aewSpc8OXJndGG3CSXYH5ZdrnMswHYmmCz8dIaK6UNaE92a6zl bDTIKGo6u2V8GeECYvI+tUZxnj2x0gKRQIoK68B2yVxy9n+VPK/vXGu3T+XBhm7Y Dfj8Uyxn7iA7n+Rl21rKdlmeoRyyJYZSyH2181YC4vaRluPpiP4ouoPUsiuRcF0W UnDw594jh/K8RiNVJLPiX4qnlNz0L2gU5LSYbbRvpZM1lsW8PINUdLgrQdYzwBT/ xgCZKrwjxDBuSanaFLZiqI4pKuMTFnYTmUvhKeJqhW/uUiiZVyLa3QkyUdaktYNo X/7e5bmXnSW14MrvE1gJOU1pDbIf748AZfdzN8jS/b9OhsX9vony3H+An9YJo/pe mrRFgY92bB/n3siZpgwDNU526x5+cFDdWPKVOAEknofHe7vHzvhF8Hx8Co7NQeZf kdV5p5l5esrDC65q0Y6HYBXokez8fSuRQF2+oSXJcCP4lYVl+4HRFvNmyPENHsRC GEj17bbMFH89/af+zQPl6X7+zRn5BUEK5WN7EejntqhceRDuqrdko8x+EQ== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkfBiZgwZ1RxlPkRQ2JE B+5SD/S2E+zWlshYUo1QoZIUEyMhjUWCX75/tH/TL43onwJderuj3W0S7Q00SLb6 ZmTw8+uEtNIUwFBTyrPNcyc0m03d+NgNXa/FJX089BMwvZtCaTA44hqR3O66mc+N 3rf9SQU3juNvN8EDqZ77wFAdEbKiQzVcPQ9TVfimvDlmLjHklq0/lSzqMBMusec5 9DaOzd0Vr3yJsvCjR7mNMTA2b9aSRhOgTkT9h4x1lb4gDeZXbsypyFSLTmWxMIW5 1avX/T61lJ4S9lz2vXBcOcG/EhQnhcIhUKmpjYtVok6vUJxAAbszmrowrbp5ven9 KQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 102856350285319303549832033584999918675 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rotterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gemeente Rotterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gemeente Rotterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sso.ir.rotterdam.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24020662148786316880832335182220366107299033093439646784280501584898876880180413356172056741176766186381667975228856521034912883577067694322353669762723302093838873395222440719132647651527242372660884072599833324410995851404936946462878492541270119796548705618560348799794936327727104879888945368092119600987382310641753933005661269424396765390918408626945936179095348562671285029807199078820057295899866974803156470275695177315381309802448302377133219091662924361184972420334872618844717858792669187348661413132312559603265205472097310488145302363215372970156666866829222461328662273805262685101035949107261259513129 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 60faf3548d37bad3f56b39e5cbfe2cf61c6871fd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.ir.rotterdam.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.5b1eddfdee8e43b095be28ce55d26a58' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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