acceptatie-cms.crs.gdi.nl

Issued by Getronics CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 2f:33:08:c8:33:17:6f:9a:df:8c:49:d7:46:69:dc:78 was issued on by Getronics Nederland BV .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set

Dienst Publiek en Communicatie

Organization: Dienst Publiek en Communicatie
Organization unit: Vakgroep interactief
State / Province: Zuid-Holland
Locality: Den Haag
Country: NL

Getronics Nederland BV

Organization: Getronics Nederland BV
State / Province: Zuid-Holland
Locality: Den Haag
Country: NL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:33:08:c8:33:17:6f:9a:df:8c:49:d7:46:69:dc:78
Serial Number (int): 62738701062397722136091149446784081016
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 28:df:95:3e:76:f8:13:5f:62:24:7a:a6:c2:f5:33:d7:f9:60:ed:f8
AuthorityKeyId: 38:b2:85:e6:ad:f8:a6:d0:41:58:5b:78:6f:dc:d5:b8:44:76:c5:7b

Fingerprint (sha1): 8d:b9:49:5a:4b:ee:c5:7c:af:6a:69:f8:52:d2:9c:fb:4f:c2:77:c6
Fingerprint (sha256): 81:c8:aa:74:ab:d7:24:e1:8f:dc:50:49:e9:24:fd:c0:c6:1e:1f:b8:eb:c7:54:cf:cc:f4:4d:ee:76:e4:2f:01


Revocation information

OCSP Server: http://ocsp2.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/pkioverheid/crl/GetronicsCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on acceptatie-cms.crs.gdi.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: acceptatie-cms.crs.gdi.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGzjCCBLagAwIBAgIQLzMIyDMXb5rfjEnXRmnceDANBgkqhkiG9w0BAQsFADBa MQswCQYDVQQGEwJOTDEfMB0GA1UECgwWR2V0cm9uaWNzIE5lZGVybGFuZCBCVjEq MCgGA1UEAwwhR2V0cm9uaWNzIENTUCBPcmdhbmlzYXRpZSBDQSAtIEcyMB4XDTEy MDMxNDAwMDAwMFoXDTE1MDMxNDIzNTk1OVowgaMxCzAJBgNVBAYTAk5MMRUwEwYD VQQIDAxadWlkLUhvbGxhbmQxETAPBgNVBAcMCERlbiBIYWFnMScwJQYDVQQKDB5E aWVuc3QgUHVibGllayBlbiBDb21tdW5pY2F0aWUxHTAbBgNVBAsMFFZha2dyb2Vw IGludGVyYWN0aWVmMSIwIAYDVQQDDBlhY2NlcHRhdGllLWNtcy5jcnMuZ2RpLm5s MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9pH0/+03nDtF3sUHRM9 xOOmHHzRfREn5+Rh0bM9GToY4thxBoDp9Z6AQI2HoT0IHPMBhyo+JI+zWvEskYJQ +pzEfoWDAPf1EpHb/5XFNSAjDJyz+VipOSrmyhoM4b3nFVlHmRLsm5YneZu/0LiZ P9u8NVmk8r74Ol9OYuZn6td7mCx8DzCqDxrOz1KC2ef5HldDNXzBEqlZiKvuiAG5 hPYHgKwmYqrkhryRqdX7sXBOZdvtZ0jXIlwSIdA99+ysJnhld+ktFt3BlS8UQEeB RRDrOyocgL92p3q5jIT5TvSpwNDcXKHTuR0afFK46F5uI6/LHfIZDUdSeU+29AZN 8wIDAQABo4ICRDCCAkAwDAYDVR0TAQH/BAIwADBlBgNVHR8EXjBcMFqgWKBWhlRo dHRwOi8vY2VydC5tYW5hZ2VkcGtpLmNvbS9wa2lvdmVyaGVpZC9jcmwvR2V0cm9u aWNzQ1NQT3JnYW5pc2F0aWVDQUcyL0xhdGVzdENSTC5jcmwwDgYDVR0PAQH/BAQD AgOoMIGuBgNVHSAEgaYwgaMwgaAGCmCEEAGHawECBQYwgZEwOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LnBraS5nZXRyb25pY3MubmwvcGtpb3ZlcmhlaWQvY3BzMFUG CCsGAQUFBwICMEkaR09wIGRpdCBjZXJ0aWZpY2FhdCBpcyBoZXQgQ1BTIFBLSW92 ZXJoZWlkIHZhbiBHZXRyb25pY3MgdmFuIHRvZXBhc3NpbmcuMB8GA1UdIwQYMBaA FDiyheat+KbQQVhbeG/c1bhEdsV7MB0GA1UdDgQWBBQo35U+dvgTX2IkeqbC9TPX +WDt+DAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwcAYDVR0RBGkwZ4IZ YWNjZXB0YXRpZS1jbXMuY3JzLmdkaS5ubKBKBgorBgEEAYI3FAIDoDwMOjIuMTYu NTI4LjEuMTAwMy4xLjMuNS40LjEuNWFjYmRmMTc0NDFjNjM0ODliYWI3ZTY2NTlk MzZkMTQwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcDIu bWFuYWdlZHBraS5jb20wDQYJKoZIhvcNAQELBQADggIBAEQHyx47mppRM4LSQz27 TOhpAqh7juI94Ybq2Yclxl8vtCCDHuZ0Mm37BegJR7rgWK0FM4guMGhbmwEKfiM8 hE2hZgcO+hhLXDIm3IEp5tryXSiLkpUB6zNioETbLX+7MxdINlysQDE0vTfy5wYi 5AQfDiBQct4fDtTvM+Y2IXI1TL2iFnKrsS+1kE8ta4Vct0+Q7wgY8u8AJlnnLpBq zNEpJmSoC8/ppK88QzMFZKNM27qlqtDsZPJoQZCyEqtvmnYYmq/rAgCUsU6g4LxK B+cUn6eBfDQ0gddzNYy1y9RmAGHDd7kQvodRjzkskmCOxm7eLrCgUD0mI/VsgOwm jjUUAyALQ4N250ruoeWy6gPgqsbNFtcIPGKdc40panoV8fJfPPRhPd7NvavwQmBI jNyF4LljeWhXgSQcLx+UhiuT5m8MO/8xxJFUNHfJ/O6L04EwiX/xvq6r9NA1XAeC buYrL6I2kfSN0EL//q5LfengNiVkag+C91WFBuCq9APWHsCOS9P4/5fsbV48p++o eobGn+9RuMdlq6g2qbbWmOBEHVO6Vq5Z6SoyXVeex+wbmExSiWtPHxUReq1WDZSz Odg+Rinpu0WeX1aDupey7IK1WGbWgDpcOPRv3yuyPXUTlFIlNDGf8XrzJkC830Df GYE/puwW/aDDEUPHG43oi6Vj -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9pH0/+03nDtF3sUHRM9 xOOmHHzRfREn5+Rh0bM9GToY4thxBoDp9Z6AQI2HoT0IHPMBhyo+JI+zWvEskYJQ +pzEfoWDAPf1EpHb/5XFNSAjDJyz+VipOSrmyhoM4b3nFVlHmRLsm5YneZu/0LiZ P9u8NVmk8r74Ol9OYuZn6td7mCx8DzCqDxrOz1KC2ef5HldDNXzBEqlZiKvuiAG5 hPYHgKwmYqrkhryRqdX7sXBOZdvtZ0jXIlwSIdA99+ysJnhld+ktFt3BlS8UQEeB RRDrOyocgL92p3q5jIT5TvSpwNDcXKHTuR0afFK46F5uI6/LHfIZDUdSeU+29AZN 8wIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 62738701062397722136091149446784081016 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Getronics Nederland BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Getronics CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Den Haag' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dienst Publiek en Communicatie' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vakgroep interactief' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'acceptatie-cms.crs.gdi.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18664668995045550551523346684410226161870057966437119516926746859854889707191679782294713288859454742040322429915706938981412622918681475216342105113412571863790778406661950525313702972482698739537727334451776471527220806635719179197367358344884499328748862693647199917575010776052672292398844974509068700653530738192024351928709560242685668177030878576820283779042681085887007962224908674344688054802966009641565213314503534689098067150175484131517301160201080237086964854205921275608746773160355357775802969676727558850830928944727871483579592258679106420726239079607376566395126469211939524954728976609188877061619 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/pkioverheid/crl/GetronicsCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (166 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.pki.getronics.nl/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 71 101 116 114 111 110 105 99 115 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38b285e6adf8a6d041585b786fdcd5b84476c57b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 28df953e76f8135f62247aa6c2f533d7f960edf8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptatie-cms.crs.gdi.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.3 (universalPrincipalName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2.16.528.1.1003.1.3.5.4.1.5acbdf17441c63489bab7e6659d36d14' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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