beeldbank.rws.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 72:50:01:ce:3f:8c:43:39:a3:b5:99:6a:03:5e:13:cf was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Rijkswaterstaat Data-ICT Dienst

Company registration number: 00000001821699180000
Organization: Rijkswaterstaat Data-ICT Dienst
Organization unit: Data-ICT-Dienst
State / Province: Zuid-Holland
Locality: Delft
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Zuid-Holland
Locality: Delft
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 72:50:01:ce:3f:8c:43:39:a3:b5:99:6a:03:5e:13:cf
Serial Number (int): 151947411891241400006746468156964737999
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 37:b8:0f:23:24:41:f4:1c:44:2b:f8:19:c0:62:7d:6b:81:4f:fd:89
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): 6b:35:f8:c0:61:0d:05:85:db:a8:df:e3:a7:3b:e7:b0:67:6f:20:f1
Fingerprint (sha256): 3d:62:9e:26:89:2f:bb:11:96:fd:11:c6:bb:b7:a5:de:5b:6b:05:49:2f:14:98:1d:04:80:ab:45:71:b0:36:f3


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on beeldbank.rws.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: beeldbank.rws.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIG1jCCBL6gAwIBAgIQclABzj+MQzmjtZlqA14TzzANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE0MDgyOTAwMDAwMFoXDTE3MDgyODIzNTk1OVowgbIxCzAJBgNV BAYTAk5MMRUwEwYDVQQIDAxadWlkLUhvbGxhbmQxDjAMBgNVBAcMBURlbGZ0MSgw JgYDVQQKDB9SaWprc3dhdGVyc3RhYXQgRGF0YS1JQ1QgRGllbnN0MRgwFgYDVQQL DA9EYXRhLUlDVC1EaWVuc3QxHTAbBgNVBAUTFDAwMDAwMDAxODIxNjk5MTgwMDAw MRkwFwYDVQQDDBBiZWVsZGJhbmsucndzLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAoUVHZyu7X/jyKzZ3VLUQ5arlFGwgaBsCh0avrGbLqccduZTa 1r4PPr+zCbaB1d4o+9OF1zOI98vnKoiL4zwieUFWRp58t5PW0+oR/DaBbb+GPzH+ /ecO0bXaf+M93JolB8n0YrNtpdMhp+uJ8oFshXg/zBQZrbjbhbXqylNB8lCeriiS LilrvMhlwBw/zaDvPgB3LhjdxV85gADmJxOh0db7v3rGiXpFWzoQNC9oK7a5D3Qq Zno/Mtxt5c/v61Zhq5rYlx9SKHGLHZgxKlVRN5pPH6d1D3y+kSPgeF8yXdVw/HbQ v0+MvFp96DYhn5/IGjH4uV//k431TQYeEwlLlwIDAQABo4ICMTCCAi0wDAYDVR0T AQH/BAIwADBiBgNVHR8EWzBZMFegVaBThlFodHRwOi8vY2VydC5tYW5hZ2VkcGtp LmNvbS9jcmwvS1BOQ29ycG9yYXRlTWFya2V0Q1NQT3JnYW5pc2F0aWVDQUcyL0xh dGVzdENSTC5jcmwwDgYDVR0PAQH/BAQDAgOoMIGnBgNVHSAEgZ8wgZwwgZkGCmCE EAGHawECBQYwgYowNwYIKwYBBQUHAgEWK2h0dHBzOi8vY2VydGlmaWNhYXQua3Bu LmNvbS9wa2lvdmVyaGVpZC9jcHMwTwYIKwYBBQUHAgIwQxpBT3AgZGl0IGNlcnRp ZmljYWF0IGlzIGhldCBDUFMgUEtJb3ZlcmhlaWQgdmFuIEtQTiB2YW4gdG9lcGFz c2luZy4wHwYDVR0jBBgwFoAUJtBlE/Huem9hCCjeTZgHEkh4tO8wHQYDVR0OBBYE FDe4DyMkQfQcRCv4GcBifWuBT/2JMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBnBgNVHREEYDBeghBiZWVsZGJhbmsucndzLm5soEoGCisGAQQBgjcUAgOg PAw6Mi4xNi41MjguMS4xMDAzLjEuMy41LjkuMS4yOWRkOGI0OWVmZGIzODNmYWVh NTU1ODhlN2I4OGFjZjA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAGGG2h0dHA6 Ly9vY3NwMy5tYW5hZ2VkcGtpLmNvbTANBgkqhkiG9w0BAQsFAAOCAgEALDQ74xSw UKHcN5w1B7pjwIFb0ShDmbP1bsVDThzYy89aRNrIlI7gV+aB2ENYNwHqZtPjXFon jHfly0gBe4fH8PO5baQQ2EZPR7pwgCo5cU+zgqYJouHbgBxhZtpLeBFwSok/WDyt qNBFgQJcBYh5euj2vrL6IFdRqQeHyZOf3lkMjya0tqhJpaF1duKh+o52oqua+1h5 BRX4tsE5OLXSc+WARYIPXQ3Me7Z0xYKCgVKHPXx/s9Tbxa0JpEnoe46EII05CbGn 5TP+PgLrK/+OWgOlI6LQHhFquk+ktSes7us8QuN5d10OWLRLOe4RVuG7hmjXreJD CAikXhYgEOSjNH086rMbsVzk3DU4YmaPVtiPuMtHYHvIpMXZF+S+2XGpcA5s0ZEt kJBv4HO0IJD2ZZpwsGn1z40P3FEK2/PoJpudMWF49woXq97GQ96bZGocXxs2LXBt PUuyPaIqQmxIasTkeb6smtjL/c64WoZxqauZr0TYbdoyZukDwVLSdNt8VIoW9psF HG9VrpObcRmype+OrKx5tPAwy/txK0Ermw5+flrF2c79U0Hy+uAVthG4qyJRTMpy R2WwmpRGV5D8dcPvk2Fy7YZmsw9shTK4uzm6x4y5wRuS8R05IglGUl3zCdWp9gM9 RgedSuQn58DE53ZuNzStbbmEk4mjia7pLdo= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUVHZyu7X/jyKzZ3VLUQ 5arlFGwgaBsCh0avrGbLqccduZTa1r4PPr+zCbaB1d4o+9OF1zOI98vnKoiL4zwi eUFWRp58t5PW0+oR/DaBbb+GPzH+/ecO0bXaf+M93JolB8n0YrNtpdMhp+uJ8oFs hXg/zBQZrbjbhbXqylNB8lCeriiSLilrvMhlwBw/zaDvPgB3LhjdxV85gADmJxOh 0db7v3rGiXpFWzoQNC9oK7a5D3QqZno/Mtxt5c/v61Zhq5rYlx9SKHGLHZgxKlVR N5pPH6d1D3y+kSPgeF8yXdVw/HbQv0+MvFp96DYhn5/IGjH4uV//k431TQYeEwlL lwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 151947411891241400006746468156964737999 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delft' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijkswaterstaat Data-ICT Dienst' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Data-ICT-Dienst' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000001821699180000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'beeldbank.rws.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20358529807268659966801081123057704035578565655345522015914386040600491569659567565734453272864692857455339131254437402097149613239547984107964167734185658387576862548979172315478035736528872705000752481870932267622654872609905398357044714791140273959228758978858407888463845457232541189832645353374258086455714890588960477983274347756078947081161195182244687510276957064925295408105813011447490829554254215834901654373321801753090997519368780270730498952875811655904254276524047844868785865235130722986886325783544668466033446619647071343484748295433600253561222771447849641915236457253925045111404341148064978389911 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 37b80f232441f41c442bf819c0627d6b814ffd89 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beeldbank.rws.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.9.1.29dd8b49efdb383faea55588e7b88acf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 002c343be314b050a1dc379c3507ba63c0815bd1284399b3f56ec5434e1cd8cbcf5a44dac8948ee057e681d843583701ea66d3e35c5a278c77e5cb48017b87c7f0f3b96da410d8464f47ba70802a39714fb382a609a2e1db801c6166da4b7811704a893f583cada8d04581025c0588797ae8f6beb2fa205751a90787c9939fde590c8f26b4b6a849a5a17576e2a1fa8e76a2ab9afb58790515f8b6c13938b5d273e58045820f5d0dcc7bb674c582828152873d7c7fb3d4dbc5ad09a449e87b8e84208d3909b1a7e533fe3e02eb2bff8e5a03a523a2d01e116aba4fa4b527aceeeb3c42e379775d0e58b44b39ee1156e1bb8668d7ade2430808a45e162010e4a3347d3ceab31bb15ce4dc353862668f56d88fb8cb47607bc8a4c5d917e4bed971a9700e6cd1912d90906fe073b42090f6659a70b069f5cf8d0fdc510adbf3e8269b9d316178f70a17abdec643de9b646a1c5f1b362d706d3d4bb23da22a426c486ac4e479beac9ad8cbfdceb85a8671a9ab99af44d86dda3266e903c152d274db7c548a16f69b051c6f55ae939b7119b2a5ef8eacac79b4f030cbfb712b412b9b0e7e7e5ac5d9cefd5341f2fae015b611b8ab22514cca724765b09a94465790fc75c3ef936172ed8666b30f6c8532b8bb39bac78cb9c11b92f11d39220946525df309d5a9f6033d46079d4ae427e7c0c4e7766e3734ad6db9849389a389aee92dda