bosincasso.nl
Issued by R3
About this certificate
This digital certificate with serial number 04:27:2f:8d:ba:0a:ac:e7:91:1c:d2:86:60:eb:ff:8c:21:29 was issued on by Let's Encrypt.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=bosincasso.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:27:2f:8d:ba:0a:ac:e7:91:1c:d2:86:60:eb:ff:8c:21:29Serial Number (int): 361783365639990510391471072762193391657257
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 44:1f:97:8f:0f:e8:18:28:0e:c2:1f:eb:16:33:71:98:9b:76:1d:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7b:39:aa:4c:ef:7d:6b:9a:cc:88:65:2c:fa:c3:a6:dc:90:16:e4:62
Fingerprint (sha256): 40:76:6c:fb:60:01:83:9c:31:7b:89:d9:f3:55:99:c2:ec:8b:0e:f5:99:79:b2:76:c3:f6:e2:bf:cb:b8:b0:9f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate bosincasso.nl
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bosincasso.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
area.bosincasso.nl
biblionet.bosincasso.nl
bibliotheekwaterland.bosincasso.nl
bosincasso.nl
buurtkadoos.bosincasso.nl
cwz.bosincasso.nl
denieuwebibliotheek.bosincasso.nl
engie.bosincasso.nl
erasmus.bosincasso.nl
gelreziekenhuizen.bosincasso.nl
independer.bosincasso.nl
mijnns.bosincasso.nl
mzh.bosincasso.nl
nedasco.bosincasso.nl
ns-spitsreizen.bosincasso.nl
ns-uitchecken.bosincasso.nl
ns-uvb.bosincasso.nl
ns.bosincasso.nl
nsfietskluis.bosincasso.nl
profyte.bosincasso.nl
tele2.bosincasso.nl
www.bosincasso.nl
youvia.bosincasso.nl
ziggo.bosincasso.nl
biblionet.bosincasso.nl
bibliotheekwaterland.bosincasso.nl
bosincasso.nl
buurtkadoos.bosincasso.nl
cwz.bosincasso.nl
denieuwebibliotheek.bosincasso.nl
engie.bosincasso.nl
erasmus.bosincasso.nl
gelreziekenhuizen.bosincasso.nl
independer.bosincasso.nl
mijnns.bosincasso.nl
mzh.bosincasso.nl
nedasco.bosincasso.nl
ns-spitsreizen.bosincasso.nl
ns-uitchecken.bosincasso.nl
ns-uvb.bosincasso.nl
ns.bosincasso.nl
nsfietskluis.bosincasso.nl
profyte.bosincasso.nl
tele2.bosincasso.nl
www.bosincasso.nl
youvia.bosincasso.nl
ziggo.bosincasso.nl
Other certificates including the domain name bosincasso.nl
(limited to 100 certificates)
redirect.bosincasso.nl
webmail.bosincasso.nl
payportaal.nl
redirect.bosincasso.nl
ns.bosincasso.nl
portal.bosincasso.nl
ns.bosincasso.nl
webmail.bosincasso.nl
transactions.bosincasso.nl
payportaal.nl
bosincasso.nl
bosincasso.nl
bosincasso.nl
payportaal.nl
*.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
mijn.lavg.nl
*.bosincasso.nl
portal.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
bosincasso.nl
*.bosincasso.nl
payportaal.nl
support.bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
portal.bosincasso.nl
bosincasso.nl
redirect.bosincasso.nl
portal.bosincasso.nl
mijn.lavg.nl
redirect.bosincasso.nl
payportaal.nl
bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
bosincasso.nl
webmail.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl
webmail.bosincasso.nl
payportaal.nl
redirect.bosincasso.nl
ns.bosincasso.nl
portal.bosincasso.nl
ns.bosincasso.nl
webmail.bosincasso.nl
transactions.bosincasso.nl
payportaal.nl
bosincasso.nl
bosincasso.nl
bosincasso.nl
payportaal.nl
*.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
mijn.lavg.nl
*.bosincasso.nl
portal.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
bosincasso.nl
*.bosincasso.nl
payportaal.nl
support.bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
portal.bosincasso.nl
bosincasso.nl
redirect.bosincasso.nl
portal.bosincasso.nl
mijn.lavg.nl
redirect.bosincasso.nl
payportaal.nl
bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
bosincasso.nl
webmail.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl
Certificate
The complete raw certificate details for bosincasso.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIHjCCBwagAwIBAgISBCcvjboKrOeRHNKGYOv/jCEpMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTcxNjEzMTlaFw0yNDAzMTYxNjEzMThaMBgxFjAUBgNVBAMT DWJvc2luY2Fzc28ubmwwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCl THcK8EKjmspJTRLtWQ5qCJh+Xkdvy3W9erMp14na6IaPfZYXkXYNtJtM2nXMMjsN xEOX1cz/y+aChgbTPDGOa7mNbYOD+zckHUqWpTmUlQkvBPWrO1JBhz1lRFwWDKqq ZYB1bsxfy1eXLkWSQ4I3xfmhoobW01LssBnzjx1A4K/K+LcHaeKL+Jz/hxvK7qD/ /hHHE2Fg1TmIXp6B6Rul47GIuYZ+tHq7gT63y8gmCX8C/+FTI1lDrppUyPb/HEHL ZZAKJjx+95IEDlSVBLOffG7GlNUT4Uti3rOdz8uyZRjHWfKuni4pAEuUIXrMlOVf 134J1wXfnMK8alhha1hC9EKTiWTTBYkk21Ridgb9uMpxBIpSZ4S6hsQdufxUoOuR aHmOfvsm5K0Q5bQrdQ9kLVTbZrctvbyOd2G50s3zXExpcUttBm7aNBQJf5Dj8i1G PYbGNte9RHBr3XZMgfUhfNkMdBmFDpvjlQMM1He/FeEmb9Ky0xyiW857xRSFHfqn Ondxe2CrYR212++93n8IPzZwyapij/v9mlAaQZL8cZhIabc+Bzzx4ON5Fi1n2IRl ULO+UMoDAJYaxpygvLf94YJzuRbXNXtWPMaw1ekfgJzfgE4Mn8P1aEOW/gXiZ8cE jc5xgx9xtsZ/KLXoARBIbTH0ZZcADsPjJTON+gdSswIDAQABo4IERjCCBEIwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBREH5ePD+gYKA7CH+sWM3GYm3Yd3zAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzCCAk4GA1UdEQSCAkUwggJBghJhcmVhLmJvc2luY2Fz c28ubmyCF2JpYmxpb25ldC5ib3NpbmNhc3NvLm5sgiJiaWJsaW90aGVla3dhdGVy bGFuZC5ib3NpbmNhc3NvLm5sgg1ib3NpbmNhc3NvLm5sghlidXVydGthZG9vcy5i b3NpbmNhc3NvLm5sghFjd3ouYm9zaW5jYXNzby5ubIIhZGVuaWV1d2ViaWJsaW90 aGVlay5ib3NpbmNhc3NvLm5sghNlbmdpZS5ib3NpbmNhc3NvLm5sghVlcmFzbXVz LmJvc2luY2Fzc28ubmyCH2dlbHJlemlla2VuaHVpemVuLmJvc2luY2Fzc28ubmyC GGluZGVwZW5kZXIuYm9zaW5jYXNzby5ubIIUbWlqbm5zLmJvc2luY2Fzc28ubmyC EW16aC5ib3NpbmNhc3NvLm5sghVuZWRhc2NvLmJvc2luY2Fzc28ubmyCHG5zLXNw aXRzcmVpemVuLmJvc2luY2Fzc28ubmyCG25zLXVpdGNoZWNrZW4uYm9zaW5jYXNz by5ubIIUbnMtdXZiLmJvc2luY2Fzc28ubmyCEG5zLmJvc2luY2Fzc28ubmyCGm5z ZmlldHNrbHVpcy5ib3NpbmNhc3NvLm5sghVwcm9meXRlLmJvc2luY2Fzc28ubmyC E3RlbGUyLmJvc2luY2Fzc28ubmyCEXd3dy5ib3NpbmNhc3NvLm5sghR5b3V2aWEu Ym9zaW5jYXNzby5ubIITemlnZ28uYm9zaW5jYXNzby5ubDATBgNVHSAEDDAKMAgG BmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABjHjEnHAAAAQDAEYwRAIgepOG7WGzmbp6WZBo ovULF5jIiF3vOOWOzK1ClfbmY4QCIDeAoq4LkWAJfDTzhGeeTnFk54mRdg2tWoxq u74/67ZdAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGMeMSe YQAABAMARzBFAiBZO29c8aYFJHAkpEHnNduQEkSQCCWOv3EwpvbXl//XGQIhAJwL lR0wvJSxHNDuyQNL1VJ5pDWN2MHb9fxClKCE5QzYMA0GCSqGSIb3DQEBCwUAA4IB AQBJh7pU3Ex3i8obYzsfqtoZswezwHr8YZNogF95SSveo6x71oGS2U02nDgniDfq +fBovICxItNcRagFwT/J9DgBmUnEe677cFtZZr+CACnubq4jkgs0+lOPLK0PYLL1 FH78mKvWRD9rAcT+RW2O5jeHVk5hMiDEEr93/8FrBNp/qjzIMOygQ7lBw7cr2/9X nvM43+OiJ2YniVfik72Yrph+V9Unt5+Cum87vqN+2l4/ymQGaI/2X+ZtkUesGwcV UPsDV/RaBSPztYD0QnQd0JXXkmJDynBbJpqGtbRbL9o4uuR/nIZSnBUfPDtZP4Im y2BNurK/U9A/6/0RkjbxMmt0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApUx3CvBCo5rKSU0S7VkO agiYfl5Hb8t1vXqzKdeJ2uiGj32WF5F2DbSbTNp1zDI7DcRDl9XM/8vmgoYG0zwx jmu5jW2Dg/s3JB1KlqU5lJUJLwT1qztSQYc9ZURcFgyqqmWAdW7MX8tXly5FkkOC N8X5oaKG1tNS7LAZ848dQOCvyvi3B2nii/ic/4cbyu6g//4RxxNhYNU5iF6egekb peOxiLmGfrR6u4E+t8vIJgl/Av/hUyNZQ66aVMj2/xxBy2WQCiY8fveSBA5UlQSz n3xuxpTVE+FLYt6znc/LsmUYx1nyrp4uKQBLlCF6zJTlX9d+CdcF35zCvGpYYWtY QvRCk4lk0wWJJNtUYnYG/bjKcQSKUmeEuobEHbn8VKDrkWh5jn77JuStEOW0K3UP ZC1U22a3Lb28jndhudLN81xMaXFLbQZu2jQUCX+Q4/ItRj2GxjbXvURwa912TIH1 IXzZDHQZhQ6b45UDDNR3vxXhJm/SstMcolvOe8UUhR36pzp3cXtgq2Edtdvvvd5/ CD82cMmqYo/7/ZpQGkGS/HGYSGm3Pgc88eDjeRYtZ9iEZVCzvlDKAwCWGsacoLy3 /eGCc7kW1zV7VjzGsNXpH4Cc34BODJ/D9WhDlv4F4mfHBI3OcYMfcbbGfyi16AEQ SG0x9GWXAA7D4yUzjfoHUrMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 361783365639990510391471072762193391657257 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 16:13:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 16:13:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bosincasso.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674359826016852713081900960677357255191532670402037439313331932018695612667470940308572915121154573928660931890482817918418211553160228149883603671358624154225992735408651331503978103241918670752395260547559356566022240600077000593706842671940290850964173664186682525838087335355473507410131894178464681982705810778787011600309381968789992696421216777872775927223394963567343878823196914091820463693924716746366081919206154497021738446186734109653221318818635231975256670290793193937082462784876113370380937310239375845304140412578045491408770344262392959414974142509239015835146144400854264851352463398791268730007961833885705196202522807611687628077295616917489894889048416750342865568180850824983275444844811547806098446759582255945811493849218881947658131506381888281586831778352643052213252275545528173422802389045869453854755936883489154017322322783151695830208121622140736998205331161491030071669939448630415197522614759940086306198019996500953842309597604196542206484073784169205660889732076514816515061870478112215175838090784077189324834094908268463021153641108414997724076568276074887556026489293555264807192142014869814970645057331229413715598415766329851541133136836359719363612585887704949824276398701902690185558577843 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 441f978f0fe818280ec21feb163371989b761ddf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (581 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblionet.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotheekwaterland.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buurtkadoos.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwz.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denieuwebibliotheek.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engie.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasmus.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelreziekenhuizen.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independer.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnns.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzh.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedasco.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-spitsreizen.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-uitchecken.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-uvb.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsfietskluis.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profyte.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tele2.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youvia.bosincasso.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziggo.bosincasso.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c78c49c70000004030046304402207a9386ed61b399ba7a599068a2f50b1798c8885def38e58eccad4295f6e6638402203780a2ae0b9160097c34f384679e4e7164e78991760dad5a8c6abbbe3febb65d0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c78c49e6100000403004730450220593b6f5cf1a605247024a441e735db9012449008258ebf7130a6f6d797ffd7190221009c0b951d30bc94b11cd0eec9034bd55279a4358dd8c1dbf5fc4294a084e50cd8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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