klic.rijssen-holten.org

Issued by Getronics CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 01:cd:b7:53:46:e0:70:a6:3b:be:05:3a:e7:f3:5a:a6 was issued on by Getronics Nederland BV .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Gemeente Rijssen-Holten

Company registration number: 00000001001584169000
Organization: Gemeente Rijssen-Holten
Organization unit: RSNDMZ01
State / Province: Overijssel
Locality: Rijssen
Country: NL

Getronics Nederland BV

Organization: Getronics Nederland BV
State / Province: Overijssel
Locality: Rijssen
Country: NL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:cd:b7:53:46:e0:70:a6:3b:be:05:3a:e7:f3:5a:a6
Serial Number (int): 2397367130614794518978474845192542886
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 9a:0e:5b:56:25:58:d8:2a:a1:88:87:15:87:fb:7b:29:e8:2f:6b:4d
AuthorityKeyId: 38:b2:85:e6:ad:f8:a6:d0:41:58:5b:78:6f:dc:d5:b8:44:76:c5:7b

Fingerprint (sha1): cb:2d:10:cc:bb:dd:1a:90:4e:0c:6f:11:60:cc:53:73:0a:5b:42:a8
Fingerprint (sha256): 44:f2:db:a0:9e:32:d2:78:b1:7a:bf:89:cd:01:50:a6:18:57:11:f6:1e:9a:20:6d:d4:77:a6:58:90:c5:c6:b6


Revocation information

OCSP Server: http://ocsp2.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/pkioverheid/crl/GetronicsCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on klic.rijssen-holten.org
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: klic.rijssen-holten.org

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIG0zCCBLugAwIBAgIQAc23U0bgcKY7vgU65/NapjANBgkqhkiG9w0BAQsFADBa MQswCQYDVQQGEwJOTDEfMB0GA1UECgwWR2V0cm9uaWNzIE5lZGVybGFuZCBCVjEq MCgGA1UEAwwhR2V0cm9uaWNzIENTUCBPcmdhbmlzYXRpZSBDQSAtIEcyMB4XDTEx MDkyOTAwMDAwMFoXDTE0MDkyODIzNTk1OVowgaoxCzAJBgNVBAYTAk5MMRMwEQYD VQQIDApPdmVyaWpzc2VsMRAwDgYDVQQHDAdSaWpzc2VuMSAwHgYDVQQKDBdHZW1l ZW50ZSBSaWpzc2VuLUhvbHRlbjERMA8GA1UECwwIUlNORE1aMDExHTAbBgNVBAUT FDAwMDAwMDAxMDAxNTg0MTY5MDAwMSAwHgYDVQQDDBdrbGljLnJpanNzZW4taG9s dGVuLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALPUvL+iOPyT DRAb1/oN6XgvZOPUMrSGvaDIln2QFqGAUDUgk40eCn4n2Jiou8ZeDPNSunVMyC1y l9J/TpfamGVk8mwBomZCkOdudRn0M0MW5MC00bBAcbyL1iFYbLIW5KwEW8R7bTGM f6CFwE7gK3jwMVBQpToOTs113osUWXpvGQKQoq0EfjhYxjb8aQAmTiueHSjgUd3e NBoo6gSHdr4NETN5IEjnUgcXxqOlLPyUaafINrpqLqM0sM/McFAXVJiGfxilIsAC dAicoxpKF50xS+Iil6sD8xrfCPEkqc11aexwGmCLh3cY87FrW/F/eB0ulTkzvonT ZL+TzFGai18CAwEAAaOCAkIwggI+MAwGA1UdEwEB/wQCMAAwZQYDVR0fBF4wXDBa oFigVoZUaHR0cDovL2NlcnQubWFuYWdlZHBraS5jb20vcGtpb3ZlcmhlaWQvY3Js L0dldHJvbmljc0NTUE9yZ2FuaXNhdGllQ0FHMi9MYXRlc3RDUkwuY3JsMA4GA1Ud DwEB/wQEAwIDqDCBrgYDVR0gBIGmMIGjMIGgBgpghBABh2sBAgUGMIGRMDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5wa2kuZ2V0cm9uaWNzLm5sL3BraW92ZXJoZWlk L2NwczBVBggrBgEFBQcCAjBJGkdPcCBkaXQgY2VydGlmaWNhYXQgaXMgaGV0IENQ UyBQS0lvdmVyaGVpZCB2YW4gR2V0cm9uaWNzIHZhbiB0b2VwYXNzaW5nLjAfBgNV HSMEGDAWgBQ4soXmrfim0EFYW3hv3NW4RHbFezAdBgNVHQ4EFgQUmg5bViVY2Cqh iIcVh/t7Kegva00wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMG4GA1Ud EQRnMGWCF2tsaWMucmlqc3Nlbi1ob2x0ZW4ub3JnoEoGCisGAQQBgjcUAgOgPAw6 Mi4xNi41MjguMS4xMDAzLjEuMy41LjQuMS4zZDI4Y2IzNDY3NTliMTczZGZmOTdm NjA4MDVlNDFkMTA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAGGG2h0dHA6Ly9v Y3NwMi5tYW5hZ2VkcGtpLmNvbTANBgkqhkiG9w0BAQsFAAOCAgEANT7d5aEb2BB/ HkVcvsxDrR0vjHtBFP5rnpcAyjI0FZ8Nz/2K6IgkqBFCFGxwXWJsKY08OVcMm7DF NBNM3IWv3VeyDe+cJOY9PYdvfSzniCMojcvbquwRaR97nXFxwu4IH6t/D6WW5/Qz y1PXBucQi0ECDzhv+UcH6gTUxOl6AEuEMvowiUdGirWaRVJMjoRFHbLgXSz+/pNZ CWx42lFao4LhIL1QwTPXCsv2WAQ/yed5IxbmwK8XBfcyB9DSSKH+63q1syzfN78h jFv/AXMWelxWTfoQ+IZcU6CPCEzyo2nuDFVRJXFw16mdVC8rUs6s5GagLFhXk0O7 Q9NssTgYvuy8ZkfkVVk6JEAfD0WsUKQnVvMjI6LmEV5Ys/ZC57adehQ2uh8w7jrM inMrYn7qnXcKMeBj2lKhrQYkCmB01M1KaTgR5h5bJerur+uYlJO8N0od4KRnKzQz 3/DSKZeOjs26Ksckkee4dea7d5jeCIu78MAVAzb3qT2VTkPlydCAXvP/0TVEyB6i 3OT6L+3cLcfccKg7br6sfkOX1Dc4gQQtbNcmI9DE72bq36Q9psBJtkWGCiyMaw3U K/ZnPtETl6Xwzj4lnGiyLsVBEUNBTKhyGTlevAfChdhVDBGV7DxCx68k+sOrK+Wx 7qn6768GwFhIFAuo1Ny2Bkqg8MjMVtE= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9S8v6I4/JMNEBvX+g3p eC9k49QytIa9oMiWfZAWoYBQNSCTjR4KfifYmKi7xl4M81K6dUzILXKX0n9Ol9qY ZWTybAGiZkKQ5251GfQzQxbkwLTRsEBxvIvWIVhsshbkrARbxHttMYx/oIXATuAr ePAxUFClOg5OzXXeixRZem8ZApCirQR+OFjGNvxpACZOK54dKOBR3d40GijqBId2 vg0RM3kgSOdSBxfGo6Us/JRpp8g2umouozSwz8xwUBdUmIZ/GKUiwAJ0CJyjGkoX nTFL4iKXqwPzGt8I8SSpzXVp7HAaYIuHdxjzsWtb8X94HS6VOTO+idNkv5PMUZqL XwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2397367130614794518978474845192542886 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Getronics Nederland BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Getronics CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-09-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Overijssel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijssen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gemeente Rijssen-Holten' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RSNDMZ01' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000001001584169000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'klic.rijssen-holten.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22701561260960354010940604728291321735383175833123304220038575839639430049638996192676192789984293386061497781881023388278809156911687890305692094658794639777807335293676835696079396314020964431563843001102073933474524998916638787409892342712856095879805189036866221585499247000711369934359788896052708314071937189528104291736662706084003150490668077565213025790040556631389366135090197381871605040993543705787636248592171273329817366887418974316396165562663481009014200573451763063045573550938770078961091976703263655354965215371364886669136053050004181447127373645068784384505116986042473746906480057004155677084511 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/pkioverheid/crl/GetronicsCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (166 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.pki.getronics.nl/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 71 101 116 114 111 110 105 99 115 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38b285e6adf8a6d041585b786fdcd5b84476c57b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9a0e5b562558d82aa188871587fb7b29e82f6b4d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klic.rijssen-holten.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.4.1.3d28cb346759b173dff97f60805e41d1' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 00353edde5a11bd8107f1e455cbecc43ad1d2f8c7b4114fe6b9e9700ca3234159f0dcffd8ae88824a81142146c705d626c298d3c39570c9bb0c534134cdc85afdd57b20def9c24e63d3d876f7d2ce78823288dcbdbaaec11691f7b9d7171c2ee081fab7f0fa596e7f433cb53d706e7108b41020f386ff94707ea04d4c4e97a004b8432fa308947468ab59a45524c8e84451db2e05d2cfefe9359096c78da515aa382e120bd50c133d70acbf658043fc9e7792316e6c0af1705f73207d0d248a1feeb7ab5b32cdf37bf218c5bff0173167a5c564dfa10f8865c53a08f084cf2a369ee0c5551257170d7a99d542f2b52ceace466a02c58579343bb43d36cb13818beecbc6647e455593a24401f0f45ac50a42756f32323a2e6115e58b3f642e7b69d7a1436ba1f30ee3acc8a732b627eea9d770a31e063da52a1ad06240a6074d4cd4a693811e61e5b25eaeeafeb989493bc374a1de0a4672b3433dff0d229978e8ecdba2ac72491e7b875e6bb7798de088bbbf0c0150336f7a93d954e43e5c9d0805ef3ffd13544c81ea2dce4fa2feddc2dc7dc70a83b6ebeac7e4397d4373881042d6cd72623d0c4ef66eadfa43da6c049b645860a2c8c6b0dd42bf6673ed11397a5f0ce3e259c68b22ec5411143414ca87219395ebc07c285d8550c1195ec3c42c7af24fac3ab2be5b1eea9faefaf06c05848140ba8d4dcb6064aa0f0c8cc56d1