pkio-otc.signicat.nl

- Connected Information Systems B.V. -

Issued by QuoVadis PKIoverheid Server CA 2020

About this certificate

This digital certificate with serial number 55:c1:ce:2c:8b:7e:c1:38:93:76:4f:2b:8f:26:0a:4d:6c:d4:4d:6d was issued on by QuoVadis Trustlink B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Connected Information Systems B.V.

Company registration number: 00000003244440010000
Organization: Connected Information Systems B.V.
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 55:c1:ce:2c:8b:7e:c1:38:93:76:4f:2b:8f:26:0a:4d:6c:d4:4d:6d
Serial Number (int): 489586219632089696763981843898177816382231825773
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 95:c2:b7:11:21:9c:67:31:ed:cd:04:e2:a4:60:f5:ca:0a:59:90:f5
AuthorityKeyId: 22:b7:3d:c0:4e:66:6f:58:a8:73:b0:12:df:ff:bb:d3:8e:13:98:e7

Fingerprint (sha1): a2:a1:dc:d4:05:a6:b1:28:7b:1e:c6:f3:da:25:20:48:14:c1:6b:3b
Fingerprint (sha256): 45:03:fa:69:8f:b6:78:40:31:91:76:ef:73:03:f2:09:f8:08:19:7e:8c:ff:04:bd:d4:d5:7f:03:78:89:f0:d9

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl

Check the revocation status for certificate pkio-otc.signicat.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pkio-otc.signicat.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pkio-otc.signicat.nl
pkio-otc-x509.signicat.nl

Other certificates including the domain name signicat.nl

(limited to 100 certificates)
eh01.dev.signicat.nl
sso.dev.signicat.nl
sphonic.com
sso.dev.signicat.nl
demo-inloggen-sign.signicat.nl
developer.signicat.com
eh.pre.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
documentation.signicat.nl
sso.dev.signicat.nl
e2e-broker-pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
eh.qa.signicat.nl
signicat.nl
eh01.dev.signicat.nl
demo-inloggen.signicat.nl
www.sphonic.com
nonprod-idin-disp-signing01.signicat.nl
documentation.signicat.nl
eh01.dev.signicat.nl
demo-sign.signicat.nl
organisatiegegevens.signicat.nl
sso.dev.signicat.nl
demo-sign.signicat.nl
developer.signicat.com
eh-dc.pre.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
rd.signicat.nl
sso.dev.signicat.nl
pkio-otc.signicat.nl
sso.dev.signicat.nl
eh01.signicat.nl
www.signicat.nl
signicat.nl
eh01.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
eh.signicat.nl
eh-dc.pre.signicat.nl
pilot-ideal.signicat.nl
signicat.nl
e2e-broker-pkio.signicat.nl
eh01.dev.signicat.nl
eh.signicat.nl
eh01.signicat.nl
eh.qa.signicat.nl
sso.dev.signicat.nl
eh01.dev.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh.signicat.nl
eh01.dev.signicat.nl
developer.signicat.com
www.signicat.nl
eh.pre.signicat.nl
sso.dev.signicat.nl
eh01.pre.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
pkio.signicat.nl
eh01.dev.signicat.nl
documentation.signicat.nl
eh01.signicat.nl
demo-sign.signicat.nl
demo-sign.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
www.signicat.nl
organisatiegegevens.signicat.nl
demo-inloggen.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
developer.signicat.com
eh.pre.signicat.nl
e2e-config-app-pkio.signicat.nl
pilot-ideal.signicat.nl
e2e-broker-pkio.signicat.nl
demo-inloggen-forms.signicat.nl
organisatiegegevens.signicat.nl
nonprod-idin-disp-signing01.signicat.nl
organisatiegegevens.signicat.nl
signicat.nl
developer.signicat.com

Certificate

The complete raw certificate details for pkio-otc.signicat.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 489586219632089696763981843898177816382231825773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Server CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-07 11:01:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003244440010000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Connected Information Systems B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pkio-otc.signicat.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 605661170776664001594039879198178878974319029605243698660105639655485245254256548420393536201070592405831730245791235206890551227894344211649921972432702022902963687966177705042200763172036288140331072933740463192538989365820435728431267404779978057841455842921804737271756528974159382977853285732493912680045258121011051265082577969511524530140174585131785270706575866374504181389945246290023171701415067435175778976600938899142653676375492638305543654632586828651047711520847612726415154322236556864460188831664405332341987467320549524152939043576400669099016030645353417325376885177324530777305600305859815115234521952803293229287362320915834303294457343071131466328710260983191735432779585516899424052026466184409070700669527777018246212953242898796505151936608680339417693300483524185426995686413384834481516130768386382398769651919619874168607462381646726769022413777123011463347084892922956711527520507745756394145214772082178593714774619185261137106376580091526450551674254342978683644862356189146767587655789593036973455723062641487516043273422461481198161320815515166500639810617291630743608373340575142577950257521401323947713566797754483613373864519774336963445783100476640774066291453811415858348753407631088050775652827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22b73dc04e666f58a873b012dfffbbd38e1398e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkio-otc.signicat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkio-otc-x509.signicat.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95c2b711219c6731edcd04e2a460f5ca0a5990f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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