www.nza.nl

Issued by GlobalSign Extended Validation CA

About this certificate


This digital certificate with serial number 01:00:00:00:00:01:2f:11:8c:5c:79 was issued on by GlobalSign .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains unknown extension ([2.16.840.1.113730.1.1])
  • ERROR: Certificate contains a key usage different from ServerAuth, ClientAuth or ServerGatedCrypto

De Nederlandse Zorgautoriteit

Company registration number: Government Entity
Organization: De Nederlandse Zorgautoriteit
Organization unit: ICT Service Management
Address: Newtonlaan 1 41
State / Province: Utrecht
Locality: Utrecht
Country: NL

GlobalSign

Organization: GlobalSign
Organization unit: Extended Validation CA
State / Province: Utrecht
Locality: Utrecht
Country: NL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:2f:11:8c:5c:79
Serial Number (int): 1208925819615930844208249
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: b0:21:c8:2c:13:55:8c:ee:53:40:cf:6e:a5:25:e0:c7:85:12:38:0e
AuthorityKeyId: 34:b1:f9:c9:8c:6b:35:44:cc:08:69:0a:ee:e3:a3:b9:5c:bf:16:e0

Fingerprint (sha1): 72:bc:c3:cb:dc:65:3f:5c:a4:ef:80:a2:a0:59:0b:fa:41:a1:ad:97
Fingerprint (sha256): 8e:87:df:ed:4a:5f:56:f5:80:08:6c:9f:e4:49:70:89:06:73:05:0e:fe:ce:ab:1e:04:4b:62:d7:71:3d:55:7d

Issuing Certificate URL: http://secure.globalsign.net/cacert/extendval1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ExtendedSSL
CRL Distribution Point: http://crl.globalsign.net/ExtendVal1.crl

Check the revocation status for the current certificate on www.nza.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography
Netscape Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nza.nl
nza.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgILAQAAAAABLxGMXHkwDQYJKoZIhvcNAQEFBQAwYjEfMB0G A1UECxMWRXh0ZW5kZWQgVmFsaWRhdGlvbiBDQTETMBEGA1UEChMKR2xvYmFsU2ln bjEqMCgGA1UEAxMhR2xvYmFsU2lnbiBFeHRlbmRlZCBWYWxpZGF0aW9uIENBMB4X DTExMDQwMTE0MzcyNFoXDTEzMDUwODEzMjUzN1owgfYxGjAYBgNVBA8MEUdvdmVy bm1lbnQgRW50aXR5MRowGAYDVQQFExFHb3Zlcm5tZW50IEVudGl0eTETMBEGCysG AQQBgjc8AgEDEwJOTDELMAkGA1UEBhMCTkwxEDAOBgNVBAgTB1V0cmVjaHQxEDAO BgNVBAcTB1V0cmVjaHQxGDAWBgNVBAkTD05ld3RvbmxhYW4gMSA0MTEfMB0GA1UE CxMWSUNUIFNlcnZpY2UgTWFuYWdlbWVudDEmMCQGA1UEChMdRGUgTmVkZXJsYW5k c2UgWm9yZ2F1dG9yaXRlaXQxEzARBgNVBAMTCnd3dy5uemEubmwwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+8nvsunV1AeVl56fCZegCPYvRRmQIQKJ jtk/r6VN8Yyyd1ciw/X1WQSiIJyyHhl2YcZjs7J0pLYBctbwy/2gFXFtqVvd+oho QejIcAY2RjdQTpq/ID0NdiEkpMp/Or9eLhpEAHSiDnuwmXArU6Xr6tKzYOJ0maWM Lb6chFIGgpWmjHCJjMhyaEuCsfm+1TWvtLNv1iMl/CFbdQ5ZNxL+bF+uVBJetuGl lr9Wvlu8S9jT2IDl5PCokSi4gRByrlTG/jA8qhlAarizAHlXtfRSbKawiG3JrMJt qFv8cCNTaQu6S/tg2DVFBznSqXNxfrmSJXTOtz5m9DBNhipvqPL9AgMBAAGjggHU MIIB0DAfBgNVHSMEGDAWgBQ0sfnJjGs1RMwIaQru46O5XL8W4DCBggYIKwYBBQUH AQEEdjB0MD4GCCsGAQUFBzAChjJodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24ubmV0 L2NhY2VydC9leHRlbmR2YWwxLmNydDAyBggrBgEFBQcwAYYmaHR0cDovL29jc3Au Z2xvYmFsc2lnbi5jb20vRXh0ZW5kZWRTU0wwOQYDVR0fBDIwMDAuoCygKoYoaHR0 cDovL2NybC5nbG9iYWxzaWduLm5ldC9FeHRlbmRWYWwxLmNybDAdBgNVHQ4EFgQU sCHILBNVjO5TQM9upSXgx4USOA4wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBPAw NAYDVR0lBC0wKwYIKwYBBQUHAwEGCCsGAQUFBwMCBgorBgEEAYI3CgMDBglghkgB hvhCBAEwSwYDVR0gBEQwQjBABgkrBgEEAaAyAQEwMzAxBggrBgEFBQcCARYlaHR0 cDovL3d3dy5nbG9iYWxzaWduLm5ldC9yZXBvc2l0b3J5LzARBglghkgBhvhCAQEE BAMCBsAwHQYDVR0RBBYwFIIKd3d3Lm56YS5ubIIGbnphLm5sMA0GCSqGSIb3DQEB BQUAA4IBAQCngt2a+tPbj2jeDnc3KrSMZSdEmXkOeCEzBlyHWa10mifoI1pkRrdL 8+v1ocPFgJ4ZJxijc9QzezsK98tBf1/qrYWKCTlgdmqN9VP07Aj3A9M4oG/adfhr vBaqt3QSea8wI3ogyRSfxDMG0PnHnDm1s3y8nhC7rFTWFHxJLFFiEmkzf3UsCTPR Mnw2uEDi6aIftiqSb/JitAHPHr0hcI6MZFj2B7xEHMQEr8fAWtCA1o+AFKdxBmt1 qYXS188vVIxTZfAbI2yLOrWaukbmhEPYKQMQQt0IFqiu92aOzYKRS+9umPLY+jVr fX0M2sU8KQdDpwuB/iDxc4Emdk//aIUU -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fvJ77Lp1dQHlZeenwmX oAj2L0UZkCECiY7ZP6+lTfGMsndXIsP19VkEoiCcsh4ZdmHGY7OydKS2AXLW8Mv9 oBVxbalb3fqIaEHoyHAGNkY3UE6avyA9DXYhJKTKfzq/Xi4aRAB0og57sJlwK1Ol 6+rSs2DidJmljC2+nIRSBoKVpoxwiYzIcmhLgrH5vtU1r7Szb9YjJfwhW3UOWTcS /mxfrlQSXrbhpZa/Vr5bvEvY09iA5eTwqJEouIEQcq5Uxv4wPKoZQGq4swB5V7X0 UmymsIhtyazCbahb/HAjU2kLukv7YNg1RQc50qlzcX65kiV0zrc+ZvQwTYYqb6jy /QIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615930844208249 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Extended Validation CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-04-01 14:37:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-08 13:25:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Newtonlaan 1 41' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT Service Management' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'De Nederlandse Zorgautoriteit' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nza.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26507967429543224219723639495383012627024846527711376158327009893994004393538692557059304441196694132170171053626883258746965894921955791163464131517870140891614246636103761826145793430496209290890627344679230648843817666008453982697691281046796192599951944427222254906925576835488895827741571946617460895360412958377542290238226004423990174078760440383609764532788401345664061093923306723828423767039354348395372034159996070926084785678421370662170819378951687567617711677773278058838439369086859097709386718058328932034766299807204994899949340863311131773484280793540899962169914514647199576155053396870288183456509 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 34b1f9c98c6b3544cc08690aeee3a3b95cbf16e0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/extendval1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ExtendedSSL' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/ExtendVal1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b021c82c13558cee5340cf6ea525e0c78512380e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits) 06c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nza.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nza.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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