api.ect.nl

- Europe Container Terminals B.V. -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 73:2a:9a:f2:fe:93:90:cd:48:b3:f2:db:22:6d:c7:74:2a:79:3d:25 was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Europe Container Terminals B.V.

Company registration number: 00000003242971150000
Organization: Europe Container Terminals B.V.
State / Province: Zuid-Holland
Locality: Maasvlakte Rotterdam
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 73:2a:9a:f2:fe:93:90:cd:48:b3:f2:db:22:6d:c7:74:2a:79:3d:25
Serial Number (int): 657484067921836232902677742258943142227972013349
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f9:06:5c:76:57:cc:75:6c:1c:6a:46:db:05:a7:50:af:7b:27:a4:2f
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): af:5f:26:09:24:43:3c:0a:d9:13:a2:be:05:5d:a9:29:cc:8a:cf:0e
Fingerprint (sha256): 48:50:b8:ca:be:36:88:9e:48:05:dc:ce:57:3f:3f:a9:e2:97:60:ec:eb:3a:83:87:ba:90:00:f3:1a:2d:39:99

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3-2019.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate api.ect.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ect.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ect.nl

Other certificates including the domain name ect.nl

(limited to 100 certificates)
drc-remote.ect.nl
mail4.ect.nl
video.ect.nl
access.ect.nl
api.ect.nl
api.ect.nl
cisco-ise-01.dt.ect.nl
mijneforms.ect.nl
portal.ect.nl
pes.ect.nl
www.ect.nl
access.ect.nl
vpn.ect.nl
fse.ect.nl
emobits.ect.nl
invoicing.ect.nl
academy.ect.nl
pes.ect.nl
myservices.ect.nl
portal.ect.nl
ftdirect.ect.nl
api-portal-acc.ect.nl
*.ect.nl
vpn.ect.nl
eservices.ect.nl
ftdirect.ect.nl
exchange.ect.nl
www.ect.nl
api.ect.nl
mail4.ect.nl
api-acc.ect.nl
remote.ect.nl
leeromgeving.ect.nl
api-acc.ect.nl
emobits.ect.nl
ftdirect.ect.nl
*.ect.nl
invoicing.ect.nl
vpn.ect.nl
cisco-ise-02.dt.ect.nl
pes.ect.nl
*.ect.nl
api-portal-acc.ect.nl
www.ect.nl
fsi.ect.nl
pes.ect.nl
ect2rll.ect.nl
api.ect.nl
mijn-acc.ect.nl
mijn.ect.nl
exchange.hutchisonports.eu
fse.ect.nl
api.ect.nl
mijn-acc.ect.nl
Webmail.ect.nl
www.ect.nl
mijn.ect.nl
myterminal.ect.nl
mail3.ect.nl
eforms.ect.nl
api-portal.ect.nl
eservices.ect.nl
*.ect.nl
api-acc.ect.nl
portal.ect.nl
www.ect.nl
vpn.ect.nl
ftdirect.ect.nl
data.ect.nl
eservices.ect.nl
myterminal.ect.nl
exchange.ect.nl
fse.ect.nl
vpn.ect.nl
fsi.ect.nl
cisco-ise-01.dt.ect.nl
pes.ect.nl
portal.ect.nl
eservices.ect.nl
myterminal.ect.nl
leeromgeving.ect.nl
www.ect.nl
*.ect.nl
*.ect.nl
invoicing.ect.nl
www.ect.nl
invoicing.ect.nl
access.ect.nl
api.ect.nl
exchange.ect.nl
webmail.ect.nl
leeromgeving.ect.nl
exchange.hutchisonports.eu
video-acc.ect.nl
video.ect.nl
access-acc.ect.nl
eservices.ect.nl
mail3.ect.nl
Webmail.ect.nl
portal.ect.nl

Certificate

The complete raw certificate details for api.ect.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHADCCBOigAwIBAgIUcyqa8v6TkM1Is/LbIm3HdCp5PSUwDQYJKoZIhvcNAQEL
BQAwcTELMAkGA1UEBhMCTkwxETAPBgNVBAoMCEtQTiBCLlYuMRcwFQYDVQRhDA5O
VFJOTC0yNzEyNDcwMTE2MDQGA1UEAwwtS1BOIEJWIFBLSW92ZXJoZWlkIE9yZ2Fu
aXNhdGllIFNlcnZlciBDQSAtIEczMB4XDTE5MTAxNzA3MTAwOFoXDTIxMTAxNjA3
MTAwOFowgaExCzAJBgNVBAYTAk5MMRUwEwYDVQQIDAxadWlkLUhvbGxhbmQxHTAb
BgNVBAcMFE1hYXN2bGFrdGUgUm90dGVyZGFtMSgwJgYDVQQKDB9FdXJvcGUgQ29u
dGFpbmVyIFRlcm1pbmFscyBCLlYuMR0wGwYDVQQFExQwMDAwMDAwMzI0Mjk3MTE1
MDAwMDETMBEGA1UEAwwKYXBpLmVjdC5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALKFC/N5doxdn45XvwMWXd9B/GAs8pjo0QC8ih/Pef8OQstJlO6P
4jf8P4En0Dd32w+/OBYCPna/mfIi4WZGA+yZbj61gbj30l9+qDMf5GrCsmieSp7R
lwoL/GCB4kQgoLWkL7kzJWtrjHc7PVci1CYBI4NmjsVPHbXg6KFXaLWk8SinG37X
YoeO32+AecVSSGjKgw349g6AN9Tt/2wu6MvjLcafqomm+BM/xMDX8j32cEz9V5Xy
e9JfJcUhtkqgzFtIbUq0qHcVEaADnmQ5ODJupsZepDo7KyHv5X4usJiHe8FcFa5Z
SYRHKG3Jm7/+R0DtpfOV3n2KQZcXImCazMcCAwEAAaOCAl0wggJZMIGZBggrBgEF
BQcBAQSBjDCBiTBdBggrBgEFBQcwAoZRaHR0cDovL2NlcnQubWFuYWdlZHBraS5j
b20vQ0FjZXJ0cy9LUE5CVlBLSW92ZXJoZWlkT3JnYW5pc2F0aWVTZXJ2ZXJDQUcz
LTIwMTkuY2VyMCgGCCsGAQUFBzABhhxodHRwOi8vZzNvY3NwLm1hbmFnZWRwa2ku
Y29tMB0GA1UdDgQWBBT5Blx2V8x1bBxqRtsFp1CveyekLzAMBgNVHRMBAf8EAjAA
MB8GA1UdIwQYMBaAFMOapntedCuCtsZy/XROhdKXzf0YMIGxBgNVHSAEgakwgaYw
gZkGCmCEEAGHawECBQYwgYowNwYIKwYBBQUHAgEWK2h0dHBzOi8vY2VydGlmaWNh
YXQua3BuLmNvbS9wa2lvdmVyaGVpZC9jcHMwTwYIKwYBBQUHAgIwQwxBT3AgZGl0
IGNlcnRpZmljYWF0IGlzIGhldCBDUFMgUEtJb3ZlcmhlaWQgdmFuIEtQTiB2YW4g
dG9lcGFzc2luZy4wCAYGZ4EMAQICMF4GA1UdHwRXMFUwU6BRoE+GTWh0dHA6Ly9j
cmwubWFuYWdlZHBraS5jb20vS1BOQlZQS0lvdmVyaGVpZE9yZ2FuaXNhdGllU2Vy
dmVyQ0FHMy9MYXRlc3RDUkwuY3JsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAgYIKwYBBQUHAwEwFQYDVR0RBA4wDIIKYXBpLmVjdC5ubDATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAe7v+pRmdJ6ItPq2Z
jC+4RAu19AXfOronQS4Ihmp19FwscjhRP7YhieDZLCxDSKcb4BGjdrJaHIxgqGF/
YBFxy13rqCJuB+YLpeGJcnu4Sc+4xO2Ra3W/3HrWrzacGNj+Qj7KwtBU4djr1Nwb
StS4MLEXvU/WvXjt2ctyYFEH5MF18POiiDeAwn918mi0lqBkotNAlJ67r8J5CACm
ZVrtK/YgfNeX/1hkmDP5IKVotXong28/SvoovVJmhitnRIpD0TEjgoCZaoE4h9tV
UHPDQyhCry8WE94dH2XjwpLtdmoz5D0pLQf8JQDzjUweA5mvBvfy2YPQYhgyFADz
alWiwwmOaHfcQYazoTAYze1o5/cvTvw9YfINgN2duUum56PskbKUlgRE8USEubRV
E2DAY3Up7SbHnzIkKUSei+zYtEonVLsRj9ycYsL5vWNYrxexz2WALIA41u2C8s0G
hwkpsjg74PpmJnAJp/6iKFeW/aZ+2QQscQlS+Z3Og8QGE5DxTKmazZDMNGrJrvML
MAZeqoSHS5F/0asfXvwMvCisAf6LI/RxMFj0xAZB1XRHiGwGZ3SJfuj7kpYMlGfs
0I8zx5A4kwMelcnlToQPFHjlhIhiQ55uu7Dq78czEP0c9A1/AB7hMDFNy8WgNTSN
B3nUaDAggfokBvHKNqVhNiKrtYY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoUL83l2jF2fjle/AxZd
30H8YCzymOjRALyKH895/w5Cy0mU7o/iN/w/gSfQN3fbD784FgI+dr+Z8iLhZkYD
7JluPrWBuPfSX36oMx/kasKyaJ5KntGXCgv8YIHiRCCgtaQvuTMla2uMdzs9VyLU
JgEjg2aOxU8dteDooVdotaTxKKcbftdih47fb4B5xVJIaMqDDfj2DoA31O3/bC7o
y+Mtxp+qiab4Ez/EwNfyPfZwTP1XlfJ70l8lxSG2SqDMW0htSrSodxURoAOeZDk4
Mm6mxl6kOjsrIe/lfi6wmId7wVwVrllJhEcobcmbv/5HQO2l85XefYpBlxciYJrM
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 657484067921836232902677742258943142227972013349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 07:10:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-16 07:10:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Maasvlakte Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Europe Container Terminals B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003242971150000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.ect.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22536026049012336740156515443654644367871958914294207806993265379954424365063925147577631868671442060830117040011925367324892960640661252078863917677828771760092293415664048673984557028437034760268370884626766213180860425132753573373639773104906666785228725980745386613679309258673589057389998615746937074808495782729702433976250956811751320416234534405559572704732502289245554822746952183239442176922067899327098875677290701916677586673422844078353939123778695202064917815086110076494883489390009547761682645761203282160439449591170735784765041497649575444221440748084504788904078582969936075129736566356606715612359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3-2019.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9065c7657cc756c1c6a46db05a750af7b27a42f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ect.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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