www.focum.nl

- Focum Groep B.V. -

Issued by KPN PKIoverheid Organisatie CA - G2

About this certificate

This digital certificate with serial number 56:24:29:39:ea:9e:a7:69 was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Focum Groep B.V.

Company registration number: 00000003582936550000
Organization: Focum Groep B.V.
State / Province: Noord-Holland
Locality: Hilversum
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 56:24:29:39:ea:9e:a7:69
Serial Number (int): 6207131515149526889
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: e9:17:d8:86:a4:0d:c8:fb:92:41:17:c7:81:7a:00:cf:7a:0a:fd:d0
AuthorityKeyId: 75:a3:4e:8f:1e:97:dd:6c:88:01:31:ef:72:21:c2:6e:60:94:7d:80

Fingerprint (sha1): 51:99:f0:8c:34:75:2f:c9:8f:53:e5:81:e8:7b:4d:23:c1:4d:2f:dd
Fingerprint (sha256): 4e:06:95:20:72:dd:91:87:b4:d2:ad:46:0f:a5:fc:f7:2a:b1:81:13:64:d6:b8:1c:85:b7:b7:3b:ed:d9:78:89

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer

Revocation information

OCSP Server: http://g2ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl

Check the revocation status for certificate www.focum.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.focum.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Email Protection
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.focum.nl

Other certificates including the domain name focum.nl

(limited to 100 certificates)
acc.focum.nl
www.focum.nl
webmail.focum.nl
ctx.focum.nl
www.focum.nl
www.portal.focum.nl
*.agility.focum.nl
preventel.focum.nl
www.focum.nl
tst.preventel.focum.nl
www.portal.focum.nl
acc.focum.nl
www.focum.nl
*.agility.focum.nl
www.portal.focum.nl
transfer.focum.nl
mail.focum.nl
portal.focum.nl
www.focum.nl
acc.preventel.focum.nl
www.klantportaal.focum.nl
ctx.focum.nl
*.agility.focum.nl
portal.focum.nl
www.klantportaal.focum.nl
www.acc.riskportal.nl
tst.preventel.focum.nl
portal.focum.nl
www.focum.nl
www.focum.nl
acc.preventel.focum.nl
www.klantportaal.focum.nl
*.agility.focum.nl
klantportaal.focum.nl
www.klantportaal.focum.nl
preventel.focum.nl
*.agility.focum.nl
klantportaal.focum.nl
acc.preventel.focum.nl
portal.focum.nl
www.focum.nl
webmail.focum.nl
*.agility.focum.nl
*.agility.focum.nl
klantportaal.focum.nl
www.focum.nl
portal.focum.nl
transfer.focum.nl
ctx.focum.nl
portal.focum.nl
acc.riskportal.nl

Certificate

The complete raw certificate details for www.focum.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGmjCCBIKgAwIBAgIIViQpOeqep2kwDQYJKoZIhvcNAQELBQAwTjELMAkGA1UE
BhMCTkwxETAPBgNVBAoMCEtQTiBCLlYuMSwwKgYDVQQDDCNLUE4gUEtJb3Zlcmhl
aWQgT3JnYW5pc2F0aWUgQ0EgLSBHMjAeFw0xNjExMDgwOTIwMTBaFw0xOTExMDgw
OTIwMTBaMIGKMQswCQYDVQQGEwJOTDEWMBQGA1UECAwNTm9vcmQtSG9sbGFuZDES
MBAGA1UEBwwJSGlsdmVyc3VtMRkwFwYDVQQKDBBGb2N1bSBHcm9lcCBCLlYuMR0w
GwYDVQQFExQwMDAwMDAwMzU4MjkzNjU1MDAwMDEVMBMGA1UEAwwMd3d3LmZvY3Vt
Lm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxl2Wnm5lgxF8w9l
J+FfPjeGtw4Ln47MGQBfP8B+m50k/nMzvxFLaSj7BjZP41nnV7d+tvkzvuVH7qpC
ypf7oCR/KsCIZjgKJz+JX1RuSh9vEQjBFwyNSRy6JKKMpF348RnzsxfNcNWzgsZg
ENEp8L40KKlYXMS6jF7S/rSdnDLiEIt82MVLmHCTxxugULLU1+5niYF+R6161cZh
ccGisRiB/hAWyW49x1fp+7tDcVFo5rxHCAL/PAp1TywaoPGBUkqVSUDxg+fXf4kh
aVvZx+FelWXFHUEDK0WALz1q/9x6kvn6ix/+rHmsi/ne0dboxr2uJVdth7dPErMK
d4rl3QIDAQABo4ICPTCCAjkwgYoGCCsGAQUFBwEBBH4wfDBQBggrBgEFBQcwAoZE
aHR0cDovL2NlcnQubWFuYWdlZHBraS5jb20vQ0FjZXJ0cy9LUE5QS0lvdmVyaGVp
ZE9yZ2FuaXNhdGllQ0FHMi5jZXIwKAYIKwYBBQUHMAGGHGh0dHA6Ly9nMm9jc3Au
bWFuYWdlZHBraS5jb20wHQYDVR0OBBYEFOkX2IakDcj7kkEXx4F6AM96Cv3QMAwG
A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUdaNOjx6X3WyIATHvciHCbmCUfYAwgbEG
A1UdIASBqTCBpjCBmQYKYIQQAYdrAQIFBjCBijA3BggrBgEFBQcCARYraHR0cHM6
Ly9jZXJ0aWZpY2FhdC5rcG4uY29tL3BraW92ZXJoZWlkL2NwczBPBggrBgEFBQcC
AjBDDEFPcCBkaXQgY2VydGlmaWNhYXQgaXMgaGV0IENQUyBQS0lvdmVyaGVpZCB2
YW4gS1BOIHZhbiB0b2VwYXNzaW5nLjAIBgZngQwBAgIwVgYDVR0fBE8wTTBLoEmg
R4ZFaHR0cDovL2NybC5tYW5hZ2VkcGtpLmNvbS9LUE5QS0lvdmVyaGVpZE9yZ2Fu
aXNhdGllQ0FHMi9MYXRlc3RDUkwuY3JsMA4GA1UdDwEB/wQEAwIFoDAnBgNVHSUE
IDAeBggrBgEFBQcDAgYIKwYBBQUHAwQGCCsGAQUFBwMBMBcGA1UdEQQQMA6CDHd3
dy5mb2N1bS5ubDANBgkqhkiG9w0BAQsFAAOCAgEABpojca6BIKH7WKquI8qKhjwQ
wOwJg3Su8IJ89Sxi2v1lC0wEBDlKfOl9V2VAGAiQB870JguIDD7eKOyM7po13UxR
GPJtFph+xvzlsgzxfxRC4xfrWwGBCkfucDXD+Lx94k3Vg33VYsLJTyxgB86eowU3
FTaXzrn+GiwBoND1UsT0ohxp6u9H5CmyEmH+55QtgZkmG08E29kg2K9/p9TYdf1N
mUVUb7ZkBGrEmaL+c9RASGUW3ytkz/xkOiB/p0m1NSqgm5dSB+O7WZdrSbTgJK8t
VxEf9Ecq9EvT3yIbT184C2l98h0qixKY8Dw20P2mPw34942YCz7NfdUmBy/rDK8L
JYizKkxq16rJTKK3XakMPNpqr5TGNGV9kOrVqo4DisboRgUpYqh7LApGDfL3Mmcb
oXHgK2QL9rVAYPyJgbNnPOAgOLfEESfKK9+xJU7xdCHZAK2Sph4lvrfk4yM1jlCJ
hRNTMdHxoCObJZdC7O+0Felh0HsV0arj+GN4R/FRKSJYjJ6ngmh7ajq5U/3NegKw
WIBtKiRMQmJuh//7xw+f1juAdySw5CTbHKgHdfWITSKZyQ9C6i9VI9GsPDX6aJ/n
4sNU6IVaUe7DC9jerXDg6RTSgR4EplNd4NokzyoLlqfmEqHE5yaEA+oHggI/asby
26h/5n0bWjXaCIaoHQ0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxl2Wnm5lgxF8w9lJ+Ff
PjeGtw4Ln47MGQBfP8B+m50k/nMzvxFLaSj7BjZP41nnV7d+tvkzvuVH7qpCypf7
oCR/KsCIZjgKJz+JX1RuSh9vEQjBFwyNSRy6JKKMpF348RnzsxfNcNWzgsZgENEp
8L40KKlYXMS6jF7S/rSdnDLiEIt82MVLmHCTxxugULLU1+5niYF+R6161cZhccGi
sRiB/hAWyW49x1fp+7tDcVFo5rxHCAL/PAp1TywaoPGBUkqVSUDxg+fXf4khaVvZ
x+FelWXFHUEDK0WALz1q/9x6kvn6ix/+rHmsi/ne0dboxr2uJVdth7dPErMKd4rl
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6207131515149526889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN PKIoverheid Organisatie CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-08 09:20:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 09:20:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hilversum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Focum Groep B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003582936550000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.focum.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19579493206733940664605360323417813227130447784853367290019621846374391829461043605286981157221285818186371823632846120357246355486176912293571811487794912785762664802662567682180720033372985591528919273976430972961480168812870619513279807509018992323370979115963887125760977940434878592755609617127169943955164871311205897233889210353653402316089871135970002926396974845663335997599726587999770265049299975496752659549409103348239007743981517488031626636897867936099248404040099825899727354333456628849251978563371456205691884925538606875425729970216429305091043242335927348295421871139238705541767725643115579237853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g2ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e917d886a40dc8fb924117c7817a00cf7a0afdd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 75a34e8f1e97dd6c880131ef7221c26e60947d80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.focum.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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