teamkpn-stats.kpnnet.org

- Koninklijke KPN N.V. -

Issued by KPN PKIoverheid Organisatie CA - G2

About this certificate

This digital certificate with serial number 45:64:ff:2e:05:f4:0b:81 was issued on by KPN B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Koninklijke KPN N.V.

Company registration number: 00000003020452000000
Organization: Koninklijke KPN N.V.
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 45:64:ff:2e:05:f4:0b:81
Serial Number (int): 5000402059421551489
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: f9:74:b6:c2:c5:b3:b8:4d:5d:ca:ff:12:b6:c2:06:c3:96:17:b1:45
AuthorityKeyId: 75:a3:4e:8f:1e:97:dd:6c:88:01:31:ef:72:21:c2:6e:60:94:7d:80

Fingerprint (sha1): dd:f3:36:db:da:f9:7c:27:18:66:fc:84:b2:ea:e2:47:40:13:56:df
Fingerprint (sha256): 27:a4:59:1a:c8:f8:d7:38:f2:df:93:2d:e2:ab:e7:cb:ff:da:54:d7:a6:6a:bc:10:15:16:05:a7:02:a9:a8:7c

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer

Revocation information

OCSP Server: http://g2ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl

Check the revocation status for certificate teamkpn-stats.kpnnet.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for teamkpn-stats.kpnnet.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

teamkpn-stats.kpnnet.org
teamkpn-stats-acc.kpnnet.org

Other certificates including the domain name kpnnet.org

(limited to 100 certificates)
sentrymail.acc.kpnnet.org
bi.kpnnet.org
bi4dev.kpnnet.org
extselfsvc.kpnnet.org
bi.kpnnet.org
bprchatbot-acc.kpnnet.org
teamkpn-mobile.kpnnet.org
sharekpn.kpnnet.org
get-it.kpnnet.org
teamkpn-acc.kpnnet.org
ts.kpnnet.org
kpn-internal-wireless.kpnnet.org
kitnlams73s001.kpnnet.org
uat-sharekpn.kpnnet.org
wem-comet.kpnnet.org
KPN-PS02.kpnnet.org
zipsacc.kpnnet.org
cloudmail.kpnnet.org
cloudmail.kpnnet.org
ksp-admin-acc.kpnnet.org
sentryapp.acc.kpnnet.org
w2039.kpnnet.org
ciso-ksp.kpnnet.org
sentryapp.acc.kpnnet.org
bi4prd-web2.kpnnet.org
bi.kpnnet.org
filetrans.kpnnet.org
host-retail.kpnnet.org
TIMESHEET.KPNNET.ORG
sentrymail.kpnnet.org
FILETRANS.KPNNET.ORG
filetrans.kpnnet.org
filetrans.kpnnet.org
w2040.kpnnet.org
retailactueel-retail.kpnnet.org
iamportal.kpnnet.org
iamportaltst.kpnnet.org
password.kpnnet.org
KPN-PS02.kpnnet.org
mailercdn-teamkpn.kpnnet.org
teamkpn.kpnnet.org
teamkpn-acc.kpnnet.org
get-it.kpnnet.org
ksp-admin.kpnnet.org
zips.kpnnet.org
Extranet-uat.kpn.com
*.kpnnet.org
ksp-admin-acc.kpnnet.org
ts.kpnnet.org
Voice-of-the-Employee.kpnnet.org
*.kpnnet.org
bealert.kpnnet.org
winkeldossier-retail.kpnnet.org
bealert-acc.kpnnet.org
MAIL5.KPNNET.ORG
bodssnd.kpnnet.org
mail4.kpnnet.org
extranet-uat.kpn.com
wem-staging.kpnnet.org
filetrans.kpnnet.org
teamkpn-stats.kpnnet.org
mail1.kpnnet.org
*.kpnnet.org
teamkpn-chat.kpnnet.org
bisnd2.kpnnet.org
OAPILOT.KPNNET.ORG
portal117.kpnnet.org
KPN-PS02.kpnnet.org
PPScan.kpnnet.org
core.kpnnet.org
bisnd2.kpnnet.org
ksp-admin.kpnnet.org
sharekpn.kpnnet.org
ksp-admin.kpnnet.org
KPN-PS01.kpnnet.org
mail7.kpnnet.org
match.uat.kpnnet.org
teamkpn-mobile.kpnnet.org
extranet.kpn.com
ideedock.kpnnet.org
teamkpn-static.kpnnet.org
W2040.kpnnet.org
vpn.kpnnet.org
bealert.kpnnet.org
PROFINDER-UAT.KPNNET.ORG
bods4uat.kpnnet.org
bisnd2.kpnnet.org
mail2.kpnnet.org
extselfsvc.kpnnet.org
SENTRYAPP.KPNNET.ORG
ksp-admin-acc.kpnnet.org
test-paperlessshop-retail.kpnnet.org
adfs.kpnnet.org
topdesk-innovatie.kpnnet.org
bodsdev.kpnnet.org
uat-sharekpn.kpnnet.org
ws-mijnwerkplek.kpnnet.org
extselfsvc.kpnnet.org
*.kpnnet.org
Voice-of-the-Employee.kpnnet.org

Certificate

The complete raw certificate details for teamkpn-stats.kpnnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJTDCCBzSgAwIBAgIIRWT/LgX0C4EwDQYJKoZIhvcNAQELBQAwTjELMAkGA1UE
BhMCTkwxETAPBgNVBAoMCEtQTiBCLlYuMSwwKgYDVQQDDCNLUE4gUEtJb3Zlcmhl
aWQgT3JnYW5pc2F0aWUgQ0EgLSBHMjAeFw0xODA2MjIxMTUwMDJaFw0xOTA2MjIx
MTUwMDJaMIGdMQswCQYDVQQGEwJOTDEVMBMGA1UECAwMWnVpZC1Ib2xsYW5kMRYw
FAYDVQQHDA0ncy1HcmF2ZW5oYWdlMR0wGwYDVQQKDBRLb25pbmtsaWprZSBLUE4g
Ti5WLjEdMBsGA1UEBRMUMDAwMDAwMDMwMjA0NTIwMDAwMDAxITAfBgNVBAMMGHRl
YW1rcG4tc3RhdHMua3BubmV0Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBANmt/JoVsi+Iva/YJRadepqkpnWyHpvbTe41mze0kyqCLJ9XbEy3OIph
EdPgnh8rJzkrJCIiuxEydyArfjaTn/ZnZzr9/xMFwBD5edGBlSngZ3iWpIJ7ftLg
HVAE+wsK5GOmwwhbk0GEbscGzOZB5Pvgn2mEzfWteVHebD0zeWcIP5IMXBW2Wqmx
wqj5Yy9TZewPCV0hhGTh5VNPZcr+TpEftaBDQESfZTlmh2IS659lmtEMrbOHjq+P
xFlibJRf4vw41QKJVZUlvcB/ZTFG1sTvU8+9eLMEzMbD5AgfR5Y+LVQRwj1gLFZY
5mAjNepzIUnRBT4kq44OGU7F/KmBzRpJBkLqKQTlO0Y1iUW0FCOCMaoIbCdzBpwU
UgKFDD6s/fiuUpTMMISq2+0OkcdjVVIxM9AfN4atRrlz8BhNPOj0PZrw6JbTIycw
15zDzxOWM4ianS1V79NZqMEErIip/61urzafpbAtveDkmed8jNjQJTCDOVhPAd81
NI7X2Xo2SxlC3ttPWPvVMdo1AJb+h06om2eNljXwDO7yQxgZ7DOyzJz9Zd9I7EC7
/6ltyXIVmnACsh0nH5Nx1ihnGsvKqxJCciJJtGYiPG1cP1cl9CsEy4YdnUZNott1
yJSm0IMWorSMRUrsNxl3Ou/YInzlaxocOinHMYVr4IqS+Bhw9HUxAgMBAAGjggPc
MIID2DCBigYIKwYBBQUHAQEEfjB8MFAGCCsGAQUFBzAChkRodHRwOi8vY2VydC5t
YW5hZ2VkcGtpLmNvbS9DQWNlcnRzL0tQTlBLSW92ZXJoZWlkT3JnYW5pc2F0aWVD
QUcyLmNlcjAoBggrBgEFBQcwAYYcaHR0cDovL2cyb2NzcC5tYW5hZ2VkcGtpLmNv
bTAdBgNVHQ4EFgQU+XS2wsWzuE1dyv8StsIGw5YXsUUwDAYDVR0TAQH/BAIwADAf
BgNVHSMEGDAWgBR1o06PHpfdbIgBMe9yIcJuYJR9gDCBsQYDVR0gBIGpMIGmMIGZ
BgpghBABh2sBAgUGMIGKMDcGCCsGAQUFBwIBFitodHRwczovL2NlcnRpZmljYWF0
Lmtwbi5jb20vcGtpb3ZlcmhlaWQvY3BzME8GCCsGAQUFBwICMEMMQU9wIGRpdCBj
ZXJ0aWZpY2FhdCBpcyBoZXQgQ1BTIFBLSW92ZXJoZWlkIHZhbiBLUE4gdmFuIHRv
ZXBhc3NpbmcuMAgGBmeBDAECAjBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3Js
Lm1hbmFnZWRwa2kuY29tL0tQTlBLSW92ZXJoZWlkT3JnYW5pc2F0aWVDQUcyL0xh
dGVzdENSTC5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMC
BggrBgEFBQcDATBBBgNVHREEOjA4ghh0ZWFta3BuLXN0YXRzLmtwbm5ldC5vcmeC
HHRlYW1rcG4tc3RhdHMtYWNjLmtwbm5ldC5vcmcwggF7BgorBgEEAdZ5AgQCBIIB
awSCAWcBZQB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABZCdU
fysAAAQDAEYwRAIgNFy9NLzyNRaDLKgiM1/gL5rBCqYyLXXJkta+21paFE0CIDq6
WP2JPLH6l4gvEl0OAYFmIdOxnWfDhRxYVJnL6/iQAHUAVYHUwhaQNgFK6gubVzxT
8MDkOHhwJQgXL6OqHQcT0wwAAAFkJ1SAUQAABAMARjBEAiASCEtekza96ohTZ/x8
10TS6lGAl5pw23qbv68RrlOE6AIgfaOPdbU8v/GTpqtVt84/cVm6o1E94sZlUzDZ
sp3vvZYAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWQnVH+0
AAAEAwBGMEQCIHFo1Ze1RPgawsNEN+kckhtDPHuhpyBETaGxh0MI1O4aAiBEXcLo
qRWQSp/6u48+EzbRCGx1E3b8hkuj/QlnmeGcBzANBgkqhkiG9w0BAQsFAAOCAgEA
YiTQppgdhZsmmguQ+Eb1LvmnDlpLO3YLps+R8TPAY9/OpMuHG8Hav2nmUZj/1XVI
eu2MfidczVQ9BcpMnvmCbbECXVLyRwNFeHkd0XRwFWOSIn3ksLAAMXxB0KaVEvw3
MUcvmoky2ZxddE1CJiJaU2d2E4LS9Y9atFLFMnV02keea44w0YuYzsRMTfd6B+NB
BK9nioRcu+c7IitBosGxZ+7um34ILXqYJLMxKujwd3XYGyUzN/A5WXKAp4md/i80
atVOddGJelN+CPFi+g0NIU5h78xQ4y0OVJeUNam/UunxcTEyyGwES+Rbmgze9cR5
IgNJKCyJP1r3shVrHhfBdiTImMEKeZAlXnLkHSSuII9o+Exsx5pGe6tkQeQ3o0Nq
NC7dNXHsCTfCocGzDp5xJHEqsGESgAIIfsVNae42vudHTCPGo440TkGUsPTWt2zs
2B+8rhcoFvo607SAeV8PN3EoDeSsa7dQUf5ZPU2+8hJgyDQP4dVM14Q4k2Fb79Gq
ad2lQYKCwsHaFqvQsLseEa9r8BcIul00cYq+WJoJ/eqlG0PIhP7EtZH1ebtgQrIH
tX9RJBpADrjD9+l2I/2QGUX/cluX+kN/e3XT3v8D1N4fduuw+yMsOzPKt7g1xsZh
TRU4VkfaeiY34B3xj6KCqZt9/+gD93rbZGfdJdJN2a4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5000402059421551489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN PKIoverheid Organisatie CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-22 11:50:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 11:50:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koninklijke KPN N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003020452000000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'teamkpn-stats.kpnnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 888055434304268445155478605206390209918258883652078249765622644059838547493674495957530293618380755138666450461700025692936877147191193317224478678000277363292864806460249047890669291247583211972680984880884226934899940092950630158129224500061332206410014694389181113900838990168831130893337109041612997796707162581213138771308916189171349486255512763020089224410500879643378915384313055046447728823895726053794501726266776186931491547682672318249235221516174993855641574800823607937068110762387589797278559877614158226079599931426289203540238536727776598014984913002825937284020582798757029324080687262850649752741198123015183904281286682335399546387055939264981121906139930784598519057245078149919434284528561862681341328952833219089961693147641033763115176248988454448541725950419388570262464661036605204935294884509753515839559521775674778186889262209484933732351446654762583227789820560908883734335342382799032659099403037188318757444522795280455545423781886367140913292858159903846861711676635248215884909761399256160972661743468029609018566696843138935494242987448650644063055068819374613494765195463466781936817091622837683697960589898634194146235869657169258509444411448787414484118495296938033128345199292099696933651903793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g2ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f974b6c2c5b3b84d5dcaff12b6c206c39617b145
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 75a34e8f1e97dd6c880131ef7221c26e60947d80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamkpn-stats.kpnnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamkpn-stats-acc.kpnnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							0165007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016427547f2b00000403004630440220345cbd34bcf23516832ca822335fe02f9ac10aa6322d75c992d6bedb5a5a144d02203aba58fd893cb1fa97882f125d0e01816621d3b19d67c3851c585499cbebf8900075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164275480510000040300463044022012084b5e9336bdea885367fc7cd744d2ea5180979a70db7a9bbfaf11ae5384e802207da38f75b53cbff193a6ab55b7ce3f7159baa3513de2c6655330d9b29defbd96007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016427547fb4000004030046304402207168d597b544f81ac2c34437e91c921b433c7ba1a720444da1b1874308d4ee1a0220445dc2e8a915904a9ffabb8f3e1336d1086c751376fc864ba3fd096799e19c07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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