aesc.nl

- AESC B.V. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 73:26:48:16:b8:8d:e2:17:20:72:dd:b6:2a:71:82:a9 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

AESC B.V.

Organization: AESC B.V.
State / Province: Noord-Brabant
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 73:26:48:16:b8:8d:e2:17:20:72:dd:b6:2a:71:82:a9
Serial Number (int): 153059988929517455097039494577965335209
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 62:1b:a2:6a:0d:ff:82:1c:7e:30:f1:f1:b8:a1:1a:93:a6:e6:08:31
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): c3:42:58:99:00:76:3a:59:23:48:57:65:79:cf:d5:9a:06:53:3a:7e
Fingerprint (sha256): 39:5e:03:89:56:55:df:e6:ef:a9:bb:d3:e0:b4:42:39:9c:30:16:01:90:41:9b:6f:d1:97:c5:6b:12:99:2f:61

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate aesc.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aesc.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aesc.nl
www.aesc.nl

Other certificates including the domain name aesc.nl

(limited to 100 certificates)
faqs.boonservices.net
customer-support.zoho.com
support.whiglobal.com
books.newhorizonnetwork.net
customer-support.zoho.com
support.whiglobal.com
books.aesc.nl
support.cesarlogic.com
support.whiglobal.com
aesc.nl
books.aesc.nl
client.sv3nska.com
aesc.nl
clients.nevron360.com
support.whiglobal.com
help.onsiteitsupport.co.za
support.whiglobal.com
books.aesc.nl
customer-support.zoho.com
client.sv3nska.com
client.sv3nska.com
books.aesc.nl
aesc.nl
help.disruptica.com
customer-support.zoho.com
books.nephosit.com
books.aesc.nl
customer-support.zoho.com
customer-support.zoho.com
support.whiglobal.com
customer-support.zoho.com
books.aesc.nl
client.sv3nska.com
customer-support.zoho.com
customer-support.zoho.com
books.aesc.nl
customer-support.zoho.com
books.aesc.nl
aesc.nl
customer-support.zoho.com
books.aesc.nl
books.aesc.nl
help.onsiteitsupport.co.za
support.whiglobal.com
books.aesc.nl
books.aesc.nl
aesc.nl
client.sv3nska.com
helpdesk.innovationstechgroup.com
portal.simply-ip.net
aesc.nl
customer-support.zoho.com
portal.simply-ip.net
portal.simply-ip.net
support.deplume.ca
books.aesc.nl
client.sv3nska.com
books.aesc.nl
books.aesc.nl
books.nephosit.com
clientes.almijar.com
aesc.nl
support.whiglobal.com
portal.simply-ip.net
accounts.workwithonpoint.com
books.strategy.design
client.sv3nska.com
accessoclienti.10punto10.eu
client.sv3nska.com
support.whiglobal.com
webbsupport.mirror.se
support.salarium.com
portal.simply-ip.net
customer-support.zoho.com
client.sv3nska.com
support.sungrow.co
payments.timberagesystems.com
support.sungrow.co
books.aesc.nl
support.realgrader.com
books.aesc.nl
client.sv3nska.com
customer-support.zoho.com
books.ngsac.pe
help.onsiteitsupport.co.za
client.sv3nska.com

Certificate

The complete raw certificate details for aesc.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGxjCCBa6gAwIBAgIQcyZIFriN4hcgct22KnGCqTANBgkqhkiG9w0BAQsFADCB
lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD
EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy
dmVyIENBMB4XDTIzMTEyNDAwMDAwMFoXDTI0MTEyNDIzNTk1OVowSzELMAkGA1UE
BhMCTkwxFjAUBgNVBAgTDU5vb3JkLUJyYWJhbnQxEjAQBgNVBAoTCUFFU0MgQi5W
LjEQMA4GA1UEAxMHYWVzYy5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALlvb4QVrW+8QAc1i7XI0uhLKPPf2dV9u9DPZE0c22bZHCZj1pQ6H28Tv0fc
cbZwzXPzJ95lfC5Tlru9iQFuaODTT0MEwHr4RU525v2C+A9ukpJ8Om1b2JgPkyCS
fBAhZijXrIj7lIO79tDt3P39UQEkkx2j0+jLvAKynBSwfQmr9us1O3tmyw4GqJwe
XgnhDaIrQMHZYb1I80KbIWuwXLs7TBovwGe1oAaZg0aOdQaC/LLw6OjwXFmJu/lE
mjt2G/VOWrZtCgRIaJ0IJXWleObPQKxbsu50jdJr6NxC8Yds0QSz/fpJZG2KF3JV
3JjAwOrwZy2zL7WvzP+3GPTEfGUCAwEAAaOCA1kwggNVMB8GA1UdIwQYMBaAFBfZ
1iUnZ/kxwklD2TA2RIxsqU/rMB0GA1UdDgQWBBRiG6JqDf+CHH4w8fG4oRqTpuYI
MTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggr
BgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1Ud
HwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9y
Z2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUF
BwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0
aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAj
BggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wHwYDVR0RBBgwFoIH
YWVzYy5ubIILd3d3LmFlc2MubmwwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2
AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjAC0DGsAAAQDAEcw
RQIgCue8ETyx1Gt6Q7YqPYN504BkmebIJ1FtxeRHykSaKugCIQCWxCfO3ytd/CeL
lUvhYaZflG4/GIxTz2mFTE0evHV+iAB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq
68G/KIXs+GRuAAABjAC0DSgAAAQDAEgwRgIhAJl+PmCNDqujXRANT6NPSXfQl7VX
vXPHCuoLn5WVVziSAiEAiWFnJIeJPSt/kIe26TqcMmYFgDmbPpHvcCcEMOH7oVIA
dQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYwAtAyEAAAEAwBG
MEQCIDt5futmh/cdviNEoUQUaQ+/yO8aVq8QM5H1Lhgde2HnAiA1qDnVfsamNyDu
rZEhD30Vq9+V1bydtJSCzxfertHk1jANBgkqhkiG9w0BAQsFAAOCAQEAbaLCO3+s
qdnPff6eDsW9unT1Yjxl9CQCZhQG3MX4Ywh3fgZogjRBfNi7JGId5oxKpeqItmjR
LnFeKWPOJm0AgZH3CTayPmnaT5nIbeuzQtQpUwNw2nXiOXdRa3DReck0cWTPpkkj
P8NS6qpNjNZHTMDlC3uZRq+CAgyQ2vVlVSy6hEAQJNLMBfQgo4iTXYFQDhc8Toos
+JuLbmbXtFlVZq4utCV//gzYyuFZfv3DpaNR9WclLW07Qxbwb/U2MdnlHeAwkGPu
wwSyYMmaxUvjRuRqLfCYp2FRONnim1e5gzUZm6yrHc02Ek7EvkDJxU1YcrQ8XNfz
p6KoM/2dOyddtA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW9vhBWtb7xABzWLtcjS
6Eso89/Z1X270M9kTRzbZtkcJmPWlDofbxO/R9xxtnDNc/Mn3mV8LlOWu72JAW5o
4NNPQwTAevhFTnbm/YL4D26Sknw6bVvYmA+TIJJ8ECFmKNesiPuUg7v20O3c/f1R
ASSTHaPT6Mu8ArKcFLB9Cav26zU7e2bLDgaonB5eCeENoitAwdlhvUjzQpsha7Bc
uztMGi/AZ7WgBpmDRo51BoL8svDo6PBcWYm7+USaO3Yb9U5atm0KBEhonQgldaV4
5s9ArFuy7nSN0mvo3ELxh2zRBLP9+klkbYoXclXcmMDA6vBnLbMvta/M/7cY9MR8
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153059988929517455097039494577965335209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AESC B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aesc.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23409037365668307170211270756190232275224311130260936302417609505502347709809375575161217849914423225354541982762983844393778647737014954805136350226419603258176087050328487281173808016731308327093104162460067712575459503474088253066821588870501853379061445222518375420100313170122218040943739655271166014739595307535553422278413896552864952449498571849098532399572074042396478081018666376932655663332430091108206745972822741046865141177283750731844176014330132772254065327335979205209334899926344820905824569751025586272943023588036042280261727620592507515206591496980377857240861379972947329263373596212736618167397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							621ba26a0dff821c7e30f1f1b8a11a93a6e60831
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesc.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006da2c23b7faca9d9cf7dfe9e0ec5bdba74f5623c65f42402661406dcc5f86308777e06688234417cd8bb24621de68c4aa5ea88b668d12e715e2963ce266d008191f70936b23e69da4f99c86debb342d429530370da75e23977516b70d179c9347164cfa649233fc352eaaa4d8cd6474cc0e50b7b9946af82020c90daf565552cba84401024d2cc05f420a388935d81500e173c4e8a2cf89b8b6e66d7b4595566ae2eb4257ffe0cd8cae1597efdc3a5a351f567252d6d3b4316f06ff53631d9e51de0309063eec304b260c99ac54be346e46a2df098a7615138d9e29b57b98335199bacab1dcd36124ec4be40c9c54d5872b43c5cd7f3a7a2a833fd9d3b275db4