pkio-otc.signicat.nl
- Connected Information Systems B.V. -
Issued by QuoVadis PKIoverheid Server CA 2020
About this certificate
This digital certificate with serial number 55:c1:ce:2c:8b:7e:c1:38:93:76:4f:2b:8f:26:0a:4d:6c:d4:4d:6d was issued on by QuoVadis Trustlink B.V..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Connected Information Systems B.V.
Company registration number:
00000003244440010000
Organization: Connected Information Systems B.V.
Organization: Connected Information Systems B.V.
State / Province:
Zuid-Holland
Locality: Rotterdam
Country: NL
Locality: Rotterdam
Country: NL
QuoVadis Trustlink B.V.
Organization:
QuoVadis Trustlink B.V.
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 55:c1:ce:2c:8b:7e:c1:38:93:76:4f:2b:8f:26:0a:4d:6c:d4:4d:6dSerial Number (int): 489586219632089696763981843898177816382231825773
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 95:c2:b7:11:21:9c:67:31:ed:cd:04:e2:a4:60:f5:ca:0a:59:90:f5
AuthorityKeyId: 22:b7:3d:c0:4e:66:6f:58:a8:73:b0:12:df:ff:bb:d3:8e:13:98:e7
Fingerprint (sha1): a2:a1:dc:d4:05:a6:b1:28:7b:1e:c6:f3:da:25:20:48:14:c1:6b:3b
Fingerprint (sha256): 45:03:fa:69:8f:b6:78:40:31:91:76:ef:73:03:f2:09:f8:08:19:7e:8c:ff:04:bd:d4:d5:7f:03:78:89:f0:d9
Issuing Certificate URL: http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl
Check the revocation status for certificate pkio-otc.signicat.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pkio-otc.signicat.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pkio-otc.signicat.nl
pkio-otc-x509.signicat.nl
pkio-otc-x509.signicat.nl
Other certificates including the domain name signicat.nl
(limited to 100 certificates)
eh01.dev.signicat.nl
sso.dev.signicat.nl
sphonic.com
sso.dev.signicat.nl
demo-inloggen-sign.signicat.nl
developer.signicat.com
eh.pre.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
documentation.signicat.nl
sso.dev.signicat.nl
e2e-broker-pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
eh.qa.signicat.nl
signicat.nl
eh01.dev.signicat.nl
demo-inloggen.signicat.nl
www.sphonic.com
nonprod-idin-disp-signing01.signicat.nl
documentation.signicat.nl
eh01.dev.signicat.nl
demo-sign.signicat.nl
organisatiegegevens.signicat.nl
sso.dev.signicat.nl
demo-sign.signicat.nl
developer.signicat.com
eh-dc.pre.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
rd.signicat.nl
sso.dev.signicat.nl
pkio-otc.signicat.nl
sso.dev.signicat.nl
eh01.signicat.nl
www.signicat.nl
signicat.nl
eh01.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
eh.signicat.nl
eh-dc.pre.signicat.nl
pilot-ideal.signicat.nl
signicat.nl
e2e-broker-pkio.signicat.nl
eh01.dev.signicat.nl
eh.signicat.nl
eh01.signicat.nl
eh.qa.signicat.nl
sso.dev.signicat.nl
eh01.dev.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh.signicat.nl
eh01.dev.signicat.nl
developer.signicat.com
www.signicat.nl
eh.pre.signicat.nl
sso.dev.signicat.nl
eh01.pre.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
pkio.signicat.nl
eh01.dev.signicat.nl
documentation.signicat.nl
eh01.signicat.nl
demo-sign.signicat.nl
demo-sign.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
www.signicat.nl
organisatiegegevens.signicat.nl
demo-inloggen.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
developer.signicat.com
eh.pre.signicat.nl
e2e-config-app-pkio.signicat.nl
pilot-ideal.signicat.nl
e2e-broker-pkio.signicat.nl
demo-inloggen-forms.signicat.nl
organisatiegegevens.signicat.nl
nonprod-idin-disp-signing01.signicat.nl
organisatiegegevens.signicat.nl
signicat.nl
developer.signicat.com
sso.dev.signicat.nl
sphonic.com
sso.dev.signicat.nl
demo-inloggen-sign.signicat.nl
developer.signicat.com
eh.pre.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
documentation.signicat.nl
sso.dev.signicat.nl
e2e-broker-pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
eh.qa.signicat.nl
signicat.nl
eh01.dev.signicat.nl
demo-inloggen.signicat.nl
www.sphonic.com
nonprod-idin-disp-signing01.signicat.nl
documentation.signicat.nl
eh01.dev.signicat.nl
demo-sign.signicat.nl
organisatiegegevens.signicat.nl
sso.dev.signicat.nl
demo-sign.signicat.nl
developer.signicat.com
eh-dc.pre.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
rd.signicat.nl
sso.dev.signicat.nl
pkio-otc.signicat.nl
sso.dev.signicat.nl
eh01.signicat.nl
www.signicat.nl
signicat.nl
eh01.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
eh.signicat.nl
eh-dc.pre.signicat.nl
pilot-ideal.signicat.nl
signicat.nl
e2e-broker-pkio.signicat.nl
eh01.dev.signicat.nl
eh.signicat.nl
eh01.signicat.nl
eh.qa.signicat.nl
sso.dev.signicat.nl
eh01.dev.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh.signicat.nl
eh01.dev.signicat.nl
developer.signicat.com
www.signicat.nl
eh.pre.signicat.nl
sso.dev.signicat.nl
eh01.pre.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
pkio.signicat.nl
eh01.dev.signicat.nl
documentation.signicat.nl
eh01.signicat.nl
demo-sign.signicat.nl
demo-sign.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
www.signicat.nl
organisatiegegevens.signicat.nl
demo-inloggen.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
developer.signicat.com
eh.pre.signicat.nl
e2e-config-app-pkio.signicat.nl
pilot-ideal.signicat.nl
e2e-broker-pkio.signicat.nl
demo-inloggen-forms.signicat.nl
organisatiegegevens.signicat.nl
nonprod-idin-disp-signing01.signicat.nl
organisatiegegevens.signicat.nl
signicat.nl
developer.signicat.com
Certificate
The complete raw certificate details for pkio-otc.signicat.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIVDCCBjygAwIBAgIUVcHOLIt+wTiTdk8rjyYKTWzUTW0wDQYJKoZIhvcNAQEL BQAwXTELMAkGA1UEBhMCTkwxIDAeBgNVBAoMF1F1b1ZhZGlzIFRydXN0bGluayBC LlYuMSwwKgYDVQQDDCNRdW9WYWRpcyBQS0lvdmVyaGVpZCBTZXJ2ZXIgQ0EgMjAy MDAeFw0yMTEyMDcxMTAxMDVaFw0yMjEyMDUwMDAwMDBaMIGjMR0wGwYDVQQFExQw MDAwMDAwMzI0NDQ0MDAxMDAwMDELMAkGA1UEBhMCTkwxFTATBgNVBAgMDFp1aWQt SG9sbGFuZDESMBAGA1UEBwwJUm90dGVyZGFtMSswKQYDVQQKDCJDb25uZWN0ZWQg SW5mb3JtYXRpb24gU3lzdGVtcyBCLlYuMR0wGwYDVQQDDBRwa2lvLW90Yy5zaWdu aWNhdC5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJR1lce7UXTW JAFprkaT99KF7dYEky4YWMovj1vmSLg7jLETAqZYdGWYPl5pY+SPAVIGi3gQo3bE q7wgkL6DomBHTlHe0M9P5cn4QYuq5LyYwIHua593XZ6SBOzckj3OxVBV8IQLrk4u fLI7qRszZCiLszCDd5W4D8xisJGldPAElEMHau2CzGGJp5Pc5u3lyE80r3av8nau tEvj/kzv10Y7e6GtMhXMFGpIGyYwhxZXC6G42VcBH/w9rNIg+Yg9M9gUbJKFzfXX 505JU7uNZRglzbdSn167atmtLKPn59G0PC/RmptLtvaKAS1QR2UxmhYB10rsxREM HaBSP61jh5y7C7siJzMuSd1xTwlcxR5dsGcvsoiD5qPTjSejhuVML9LUDUb4qOvP DocCOavhweeXL1G8UktZC9wxmOswI/h1QlycHgbBflO2yy3eSwrARbXgg6zGSmVQ +aPOj1RaCBBu+pS5dMEZbu0jA3QgGy7Yj+38jaV2jelgQyZ2fQk3rVXXvlH8kFP2 L74N/QZicH4U20MGH0IZeD9ITOhakEpSiJNH/FXVv3qkOEDlxc4rB8vVMGZ62IIs 1YwP6iZt4e3OMXF9bnqNLp7f9kAceiZ4t7xKF2/D8XuvyS3gDLMmKV8BefLnqXU3 ez7SdWV7PLfNOsKZ3m6TlQQAd0QxFfnbAgMBAAGjggLDMIICvzAfBgNVHSMEGDAW gBQitz3ATmZvWKhzsBLf/7vTjhOY5zCBiwYIKwYBBQUHAQEEfzB9ME8GCCsGAQUF BzAChkNodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F1b3ZhZGlzcGtp b3ZlcmhlaWRzZXJ2ZXJjYTIwMjAuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8vb2Nz cC5xdW92YWRpc2dsb2JhbC5jb20wOgYDVR0RBDMwMYIUcGtpby1vdGMuc2lnbmlj YXQubmyCGXBraW8tb3RjLXg1MDkuc2lnbmljYXQubmwwggEZBgNVHSAEggEQMIIB DDCB/wYKYIQQAYdrAQIFCTCB8DA1BggrBgEFBQcCARYpaHR0cHM6Ly93d3cucXVv dmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwgbYGCCsGAQUFBwICMIGpDIGmUmVs aWFuY2Ugb24gdGhpcyBjZXJ0aWZpY2F0ZSBieSBhbnkgcGFydHkgYXNzdW1lcyBh Y2NlcHRhbmNlIG9mIHRoZSByZWxldmFudCBRdW9WYWRpcyBDZXJ0aWZpY2F0aW9u IFByYWN0aWNlIFN0YXRlbWVudCBhbmQgb3RoZXIgZG9jdW1lbnRzIGluIHRoZSBR dW9WYWRpcyByZXBvc2l0b3J5LjAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUH AwIGCCsGAQUFBwMBMFIGA1UdHwRLMEkwR6BFoEOGQWh0dHA6Ly9jcmwucXVvdmFk aXNnbG9iYWwuY29tL3F1b3ZhZGlzcGtpb3ZlcmhlaWRzZXJ2ZXJjYTIwMjAuY3Js MB0GA1UdDgQWBBSVwrcRIZxnMe3NBOKkYPXKClmQ9TAOBgNVHQ8BAf8EBAMCBaAw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBALHWcc89k0jV aG7zluRenb8IEsiaGKwAQ388H4jUQ0ExMmNE7ejk16Tu39RiE0EPUMT0d1eAXBk4 U4ifN6jiGBd6Bt7oM6Drt96BD3pDutmrfrWhQnocluNRksk1dJhPOe2zKugFvnOk OmNiADvtDIWUzKsAKBJXRX31RfbXHPLuIqlksHZA6aqKsiy+rn8ZCj3/5V8UI0DR RuhMTK/rhi+ayUP6unEhoz7HB/PTeUU6W/vPTcpzzqJ7ktet2g8ygSjnGwPFWONC rJ3u2nZkEhL+INki6e9fPSxhTp72z0zvYYLyGcg6/MZQP9AXbl6adkb28O4FHFzt xgAFCym/+uWjopUnVw8FN7AESXzJpQWY2H2mSOA8LtRXctUqvGJGdJjJJtdutSiA KfRf7aCZTJ3gSPQlbGQatnqxkM5Ms99kunxntMtdlFkolBbbl8TxcrcY4a0ql+yi eDp0iKapONhzWEtBERgEk4c4jTY2oUBIETNl+eQqVjuLbpjWstmr51fZ7bRKYeoh DQf6TjM/ddB9UrUbYUKWgNiiKyw3DR51IMKVHGcMhraZOWrmPHVP3P3ADspkF6ad yUHJRlf40pt+qPVbZXWnCJa7ZyMpn1ZScha/YxRWwqIM4juQx+igBxDjRLq52spP qMHKMcGsvou4dVYpyn98B0FOw0TVCd6V -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlHWVx7tRdNYkAWmuRpP3 0oXt1gSTLhhYyi+PW+ZIuDuMsRMCplh0ZZg+Xmlj5I8BUgaLeBCjdsSrvCCQvoOi YEdOUd7Qz0/lyfhBi6rkvJjAge5rn3ddnpIE7NySPc7FUFXwhAuuTi58sjupGzNk KIuzMIN3lbgPzGKwkaV08ASUQwdq7YLMYYmnk9zm7eXITzSvdq/ydq60S+P+TO/X Rjt7oa0yFcwUakgbJjCHFlcLobjZVwEf/D2s0iD5iD0z2BRskoXN9dfnTklTu41l GCXNt1KfXrtq2a0so+fn0bQ8L9Gam0u29ooBLVBHZTGaFgHXSuzFEQwdoFI/rWOH nLsLuyInMy5J3XFPCVzFHl2wZy+yiIPmo9ONJ6OG5Uwv0tQNRvio688OhwI5q+HB 55cvUbxSS1kL3DGY6zAj+HVCXJweBsF+U7bLLd5LCsBFteCDrMZKZVD5o86PVFoI EG76lLl0wRlu7SMDdCAbLtiP7fyNpXaN6WBDJnZ9CTetVde+UfyQU/Yvvg39BmJw fhTbQwYfQhl4P0hM6FqQSlKIk0f8VdW/eqQ4QOXFzisHy9UwZnrYgizVjA/qJm3h 7c4xcX1ueo0unt/2QBx6Jni3vEoXb8Pxe6/JLeAMsyYpXwF58uepdTd7PtJ1ZXs8 t806wpnebpOVBAB3RDEV+dsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 489586219632089696763981843898177816382231825773 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Server CA 2020' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-07 11:01:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 00:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003244440010000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rotterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Connected Information Systems B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pkio-otc.signicat.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 605661170776664001594039879198178878974319029605243698660105639655485245254256548420393536201070592405831730245791235206890551227894344211649921972432702022902963687966177705042200763172036288140331072933740463192538989365820435728431267404779978057841455842921804737271756528974159382977853285732493912680045258121011051265082577969511524530140174585131785270706575866374504181389945246290023171701415067435175778976600938899142653676375492638305543654632586828651047711520847612726415154322236556864460188831664405332341987467320549524152939043576400669099016030645353417325376885177324530777305600305859815115234521952803293229287362320915834303294457343071131466328710260983191735432779585516899424052026466184409070700669527777018246212953242898796505151936608680339417693300483524185426995686413384834481516130768386382398769651919619874168607462381646726769022413777123011463347084892922956711527520507745756394145214772082178593714774619185261137106376580091526450551674254342978683644862356189146767587655789593036973455723062641487516043273422461481198161320815515166500639810617291630743608373340575142577950257521401323947713566797754483613373864519774336963445783100476640774066291453811415858348753407631088050775652827 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22b73dc04e666f58a873b012dfffbbd38e1398e7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkio-otc.signicat.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkio-otc-x509.signicat.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository.' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 95c2b711219c6731edcd04e2a460f5ca0a5990f5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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