www.nijmegen.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 05:37:f2:e5:e5:5e:1a:d5:96:a4:ac:82:23:56:1d:2e was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Gemeente Nijmegen

Company registration number: 00000001001479179000
Organization: Gemeente Nijmegen
Organization unit: ICT Beheer
State / Province: Gelderland
Locality: Nijmegen
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Gelderland
Locality: Nijmegen
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 05:37:f2:e5:e5:5e:1a:d5:96:a4:ac:82:23:56:1d:2e
Serial Number (int): 6936642863503127352535945624000273710
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 15:f8:23:00:88:c4:03:5e:05:ac:61:1c:4a:ff:38:50:31:a8:bc:ef
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): 65:f9:be:0b:f3:91:09:02:de:aa:81:aa:5b:02:9d:fb:bc:5b:63:0c
Fingerprint (sha256): 4b:57:d9:3e:66:ae:21:12:1e:68:cc:c1:78:4e:91:07:12:21:08:f0:6f:4d:b9:80:1f:ef:d1:8e:af:9c:0a:0a


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on www.nijmegen.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.nijmegen.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGwjCCBKqgAwIBAgIQBTfy5eVeGtWWpKyCI1YdLjANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE0MDgyODAwMDAwMFoXDTE3MDgyNzIzNTk1OVowgZ8xCzAJBgNV BAYTAk5MMRMwEQYDVQQIDApHZWxkZXJsYW5kMREwDwYDVQQHDAhOaWptZWdlbjEa MBgGA1UECgwRR2VtZWVudGUgTmlqbWVnZW4xEzARBgNVBAsMCklDVCBCZWhlZXIx HTAbBgNVBAUTFDAwMDAwMDAxMDAxNDc5MTc5MDAwMRgwFgYDVQQDDA93d3cubmlq bWVnZW4ubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCqUWzCzy SoscHVcY/W7JcLLGn4iyW8m3hbLlck26shQ0Zx4w+4RwM/+knQ0lSmXxmPgUPN9q prKWdTcp5MT44JLOyeagsV4aiZVBDq3DhPemaBfDgaR9lTUj8hbqo6A9MxHwXVB+ p7fKos3MpYZqAdpslrarQ1VAXisODAbTzjRmdYti/A/b+nTEiQk/qxc3CfRQhBrv KG9Y4eJySAGG/PIaYILZRzHBRVAXTPHE/aFTX97ntQZFPlTFm6VpUdCFY6bIAOeN TGHa8Wk6HGankIR15TF7WuJH+K8uo3te1MGNJXBZNe694eo9cC6PxGtRhZJSaxOC 9g8Kx66tbo0/AgMBAAGjggIwMIICLDAMBgNVHRMBAf8EAjAAMGIGA1UdHwRbMFkw V6BVoFOGUWh0dHA6Ly9jZXJ0Lm1hbmFnZWRwa2kuY29tL2NybC9LUE5Db3Jwb3Jh dGVNYXJrZXRDU1BPcmdhbmlzYXRpZUNBRzIvTGF0ZXN0Q1JMLmNybDAOBgNVHQ8B Af8EBAMCA6gwgacGA1UdIASBnzCBnDCBmQYKYIQQAYdrAQIFBjCBijA3BggrBgEF BQcCARYraHR0cHM6Ly9jZXJ0aWZpY2FhdC5rcG4uY29tL3BraW92ZXJoZWlkL2Nw czBPBggrBgEFBQcCAjBDGkFPcCBkaXQgY2VydGlmaWNhYXQgaXMgaGV0IENQUyBQ S0lvdmVyaGVpZCB2YW4gS1BOIHZhbiB0b2VwYXNzaW5nLjAfBgNVHSMEGDAWgBQm 0GUT8e56b2EIKN5NmAcSSHi07zAdBgNVHQ4EFgQUFfgjAIjEA14FrGEcSv84UDGo vO8wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGYGA1UdEQRfMF2CD3d3 dy5uaWptZWdlbi5ubKBKBgorBgEEAYI3FAIDoDwMOjIuMTYuNTI4LjEuMTAwMy4x LjMuNS45LjEuNDc3ZDQzMTdmMWFlMDY2ZWU3MGRiYWQzZDQ3ZjE4OWQwNwYIKwYB BQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcDMubWFuYWdlZHBraS5j b20wDQYJKoZIhvcNAQELBQADggIBAMAQn3QXFKSqeC4d09GSwX38iW5JmmVrQthL Aydhe+QlC/cdQtMvgMJczoJpZm2XZix9YMOZI3w0jKP4IGvtck6lDYirKliFjw3J Vjc80NrRs+rXnrls7zfkyyCzMuPp5ffuJ5m0+1ZP64Tufc0iDVjbIfgUkNLMLMtB bYWqi6uDhLhojyhfqPePl+OywF5VbO60lZY017lbuaq0kmDCA0ivAP4f16Q/gFdo ZWzt6HjBOI/3uqnmZKgRa2H9WN69sw94FCond+iDNeWzgBjxgnfutUOnycUknR48 gM+YP8CFHUNw+9bRNhstjb1i9d3dm/Fp4QLkTqd3TwuGq7iJnfJbtrH3k3D2AJIA Wzi+MzhpljhQz+QUZ1gHzLA3xNvzMEHYzyWdidSZOP3h4Sggzi+GHcNdOgcbShMN aXlyqCZlFx+pofh5m0SXkW7+GqX9gjRN50ShBeO5T9cnJDujaQVejIfkfInfd2Pk d/jc6HNadJQ1LPdEer75jBWDRAEyCrGucVeQul3WQktYcj2UcZFQ2TjxfUPQKJXA cxIlkX1wJIoE3PgpPGpku8W0HU4NgZeVvLxFd74AZbqv1PS3CCLgEFrTdxnCK7ah lD+bM4IL0+bCPi3AjAu5ap5Wr+5rmSEUTDQQEvSuiCXX7bHSxGha/xGU5bkrzKRw d62ByxzM -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QqlFsws8kqLHB1XGP1u yXCyxp+IslvJt4Wy5XJNurIUNGceMPuEcDP/pJ0NJUpl8Zj4FDzfaqaylnU3KeTE +OCSzsnmoLFeGomVQQ6tw4T3pmgXw4GkfZU1I/IW6qOgPTMR8F1Qfqe3yqLNzKWG agHabJa2q0NVQF4rDgwG0840ZnWLYvwP2/p0xIkJP6sXNwn0UIQa7yhvWOHickgB hvzyGmCC2UcxwUVQF0zxxP2hU1/e57UGRT5UxZulaVHQhWOmyADnjUxh2vFpOhxm p5CEdeUxe1riR/ivLqN7XtTBjSVwWTXuveHqPXAuj8RrUYWSUmsTgvYPCseurW6N PwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6936642863503127352535945624000273710 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nijmegen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gemeente Nijmegen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT Beheer' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000001001479179000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nijmegen.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26389054923436781006731847850745185043844958974676072191188184287397257402095360715407543760270744399028556242480686428514792975594428606221668355832663090279441999845348218000238520300698493486356587139822147518054053387873637265408136574065451614780104843790110613157092720732158816229821452838489491478675764222495490608479222106921259728991992303501879259905456213945834976517713980996982933422243956040348271521809355128408991524058297605527028125599222913258842365080225507094814928036352420685802318715850844443865530405751248098506484460061315168619125801384643963910686353145473186496769259505838398169320767 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 15f8230088c4035e05ac611c4aff385031a8bcef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nijmegen.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.477d4317f1ae066ee70dbad3d47f189d' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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