www.coram.nl

- Coram Group B.V. -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 13:65:d6:78:db:22:8f:5c was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Coram Group B.V.

Company registration number: 00000003170630470000
Organization: Coram Group B.V.
State / Province: Noord-Brabant
Locality: Geldrop
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 13:65:d6:78:db:22:8f:5c
Serial Number (int): 1397759073929301852
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 91:1f:28:b8:4f:3b:e8:2d:d5:25:16:35:9d:9e:d2:81:c1:99:28:e8
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): d5:f0:b3:1f:85:f6:44:ce:2d:74:08:38:a5:7b:ad:5c:72:08:05:31
Fingerprint (sha256): 3c:6a:a6:66:7a:09:19:48:8e:41:df:7a:f9:36:9b:c4:05:aa:72:0b:01:12:fd:30:61:76:6d:74:50:72:7b:59

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate www.coram.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.coram.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.coram.nl

Other certificates including the domain name coram.nl

(limited to 100 certificates)
monitoring.coram.nl
www.coram.nl
coram.nl
dpi-gld-ads010.ad.coram.nl
coram.nl
coram.nl
coram.nl
ucaccess01.coram.nl
ucaccess01.coram.nl
coram.nl
fepool01.coram.nl
portal.coram.nl
sts.coram.nl
www.coram.nl
coram.nl
accessportal.coram.nl
sts.coram.nl
coram.nl
accessvpn.coram.nl
coram.nl
vpn.coram.nl
fepool01.coram.nl
coram.nl
coram.nl
coram.nl
portal.coram.nl
meetingpoint20.coram.nl
coram.nl
coram.nl
coram.nl
sts.coram.nl
portal.coram.nl
coram.nl
accessportal.coram.nl
sts.coram.nl
coram.nl
ucweb01-ext.coram.nl
coram.nl
ucweb01-ext.coram.nl
sts.coram.nl
sts.coram.nl

Certificate

The complete raw certificate details for www.coram.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIvjCCBqagAwIBAgIIE2XWeNsij1wwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UE
BhMCTkwxETAPBgNVBAoMCEtQTiBCLlYuMRcwFQYDVQRhDA5OVFJOTC0yNzEyNDcw
MTE2MDQGA1UEAwwtS1BOIEJWIFBLSW92ZXJoZWlkIE9yZ2FuaXNhdGllIFNlcnZl
ciBDQSAtIEczMB4XDTE5MDIyNTE0NTAwMloXDTIxMDQxNDE0NTAwMlowgYgxCzAJ
BgNVBAYTAk5MMRYwFAYDVQQIDA1Ob29yZC1CcmFiYW50MRAwDgYDVQQHDAdHZWxk
cm9wMRkwFwYDVQQKDBBDb3JhbSBHcm91cCBCLlYuMR0wGwYDVQQFExQwMDAwMDAw
MzE3MDYzMDQ3MDAwMDEVMBMGA1UEAwwMd3d3LmNvcmFtLm5sMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYeKwNc122ttZu17AhXkn0NIZ/rmdsdnZAPr
2/OrRQOX7Qx8vBdj5+BPTZVWeV9Udgr6axFQ2DGSXxxJAJ1jbikc1EKegWVC1p1f
wT/bHmbWJCzipF0eTm8uLwQIr74WM0Pzr4PrPAVH5DPxTW8f0frznbcv+/P3ZYCt
+sQW9Cfx0loBIqBhAggpdEsJhq0p9KwJla8JSk5M2zrAGj+/TKEJJOkl5ZQqJii1
pj2aGF8e1byKTt1UeIlnyUQ0D2Qu7r5rOnTVjbuJuNB4JkR/LeGHU6Wbov6tqmva
FoHQILdyIkTrMe6n1WlIZjTGrg/3Gah33QVEP5CeZQkn/qIT3QIDAQABo4IEQDCC
BDwwgZQGCCsGAQUFBwEBBIGHMIGEMFgGCCsGAQUFBzAChkxodHRwOi8vY2VydC5t
YW5hZ2VkcGtpLmNvbS9DQWNlcnRzL0tQTkJWUEtJb3ZlcmhlaWRPcmdhbmlzYXRp
ZVNlcnZlckNBRzMuY2VyMCgGCCsGAQUFBzABhhxodHRwOi8vZzNvY3NwLm1hbmFn
ZWRwa2kuY29tMB0GA1UdDgQWBBSRHyi4TzvoLdUlFjWdntKBwZko6DAMBgNVHRMB
Af8EAjAAMB8GA1UdIwQYMBaAFMOapntedCuCtsZy/XROhdKXzf0YMIGxBgNVHSAE
gakwgaYwgZkGCmCEEAGHawECBQYwgYowNwYIKwYBBQUHAgEWK2h0dHBzOi8vY2Vy
dGlmaWNhYXQua3BuLmNvbS9wa2lvdmVyaGVpZC9jcHMwTwYIKwYBBQUHAgIwQwxB
T3AgZGl0IGNlcnRpZmljYWF0IGlzIGhldCBDUFMgUEtJb3ZlcmhlaWQgdmFuIEtQ
TiB2YW4gdG9lcGFzc2luZy4wCAYGZ4EMAQICMF4GA1UdHwRXMFUwU6BRoE+GTWh0
dHA6Ly9jcmwubWFuYWdlZHBraS5jb20vS1BOQlZQS0lvdmVyaGVpZE9yZ2FuaXNh
dGllU2VydmVyQ0FHMy9MYXRlc3RDUkwuY3JsMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwFwYDVR0RBBAwDoIMd3d3LmNvcmFt
Lm5sMIIB9wYKKwYBBAHWeQIEAgSCAecEggHjAeEAdgBvU3asMfAxGdiZAKRRFf93
FRwR2QLBACkGjbIImjfZEwAAAWklImNcAAAEAwBHMEUCIAiijwC5qmBaXAW9xSua
YS1im2lcAWDwWEx0PRK0PXMZAiEAuCul1D6t0MjyqeUuXJm2SrD6pgA4aIylUKlC
3aqvEZwAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWklImRc
AAAEAwBIMEYCIQCezi1IkJflw2o3ECfoCLprTpTbphqYk3um6lkCVSv4xgIhAKiq
/M70F3Cc5YSI8T+849bBhtdKqK+x3yzc/8FQuMT+AHYAu9nfvB+KcbWTlCOXqpJ7
RzhXlQqrUugakJZkNo4e0YUAAAFpJSJjLQAABAMARzBFAiBo7NKEEGgTqQikIWVL
h+IIXg7czgxIpAxPAfsB2+VPPAIhAN/AlHUYRQLtH+5kAQ7rfhWV89emoFKbFNbb
ga4tlWKQAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFpJSJj
IgAABAMARzBFAiEAq2eZfuxUHMmWafoVaDRZh7GzxMtz9P+lAV4tOYXsOT4CICWE
S28war1P568c4ityjknjYlZv1zOEU694Dog3xTg6MA0GCSqGSIb3DQEBCwUAA4IC
AQA9uyuk3wxGzClLgz+4Ld6iGsqbuzO5ZNPCsL0BYCWep3zvYHVNWHVTxMNL3AzI
hg7yHZIZK+FQ4zQ93muvrg0ntYlKexpYIXKTuiSUczBEzAX4wkmTnZO99S2RXA0s
lx+2E2ZeGH0nKNDKjoGLwS81kWNI1nToYEwgE6F1b0VWurLRiiJJHB3ZXXmtW52E
ms6i+SHHwpY5gPFjTFu/e3/3LTg75bR7URNtSx67VkfdT6dJ+qG77nKxmGSPKEOP
h87z4xestvuOoPmFL19Waj1OBTLbTAyc0sPyI22PM1UBjLcbJ+r25IKGligk3kLt
hHEknOXaJEw7TU1wr3lhaBVAHzvQYjNs8+Ec5DImS32NeXWSUusghFNy4mOYAeF9
TtoGRiqU2F4DNGuUTNevUvstyHQ6fS98AYdDb5u3T5jISgdDPj+9oTrvc1alxIvB
6brVSeQhFB7QAfe5NVPCr9Bng84h/rbomNjyuigNrITn0OeB4hH0FMTswyi9yLi2
uU5O5dakaOG3t3lBO9KOkGxPSm7fIpWqRSTCOlsJSwC0qnwwVsc4ye7GGVCqpc4M
DSuzdQLt4UZnFPy3gBIZqQOv6f9mun6SX8ZZKeWpQbIuGeuPNOySFtRV14oLllh7
nhByLk3nIZJaX18vgsIGzIzfVwUi/VY7RIpTT0Uq+JwB4A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYeKwNc122ttZu17AhXk
n0NIZ/rmdsdnZAPr2/OrRQOX7Qx8vBdj5+BPTZVWeV9Udgr6axFQ2DGSXxxJAJ1j
bikc1EKegWVC1p1fwT/bHmbWJCzipF0eTm8uLwQIr74WM0Pzr4PrPAVH5DPxTW8f
0frznbcv+/P3ZYCt+sQW9Cfx0loBIqBhAggpdEsJhq0p9KwJla8JSk5M2zrAGj+/
TKEJJOkl5ZQqJii1pj2aGF8e1byKTt1UeIlnyUQ0D2Qu7r5rOnTVjbuJuNB4JkR/
LeGHU6Wbov6tqmvaFoHQILdyIkTrMe6n1WlIZjTGrg/3Gah33QVEP5CeZQkn/qIT
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1397759073929301852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 14:50:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-14 14:50:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Geldrop'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Coram Group B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003170630470000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.coram.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16351579594390310088953184827655956268135028301856754707730235629142092120978403908534583475498494620694295870096912872641538292997216265412876261297129084439262669193214523705287574829907981231892733663473229988496494820256977018461395793602103253886208087863125144241163862320673293985685946932482132504681707710553683470960756950744453656654092590520652282140357361806171697210691303297929424876480719461553381657193490988116176456295450826087669473551826506458076641149307285709863570722722635820993474564941302369081510950029468685044776548200986790416387254251055412423661200141213075095215305882947967686677469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							911f28b84f3be82dd52516359d9ed281c19928e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coram.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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