autodiscover.irvn.nl

- Modulaire Gemeenschappelijke regeling Rijk van Nijmegen -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 8e:ab:4b:4f:94:8e:b9:de:6b:4f:d7:c3:81:df:8c:66 was issued on by Sectigo Limited.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Modulaire Gemeenschappelijke regeling Rijk van Nijmegen

Organization: Modulaire Gemeenschappelijke regeling Rijk van Nijmegen
Organization unit: Functioneel Beheer
Address: Nieuwe Dukenburgseweg 21 A
Postal code: 6534 AD
State / Province: Gelderland
Locality: Nijmegen
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8e:ab:4b:4f:94:8e:b9:de:6b:4f:d7:c3:81:df:8c:66
Serial Number (int): 189639785649988948639637282447800896614
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 74:5d:4a:1c:44:81:8d:70:d9:0e:6b:9d:ac:2b:e4:c0:22:ef:62:7e
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 27:14:5b:75:1c:cf:31:69:3a:d5:f9:2f:e4:ff:17:a0:89:6b:50:52
Fingerprint (sha256): 56:4a:90:3c:9d:14:9e:cd:59:53:d8:af:a0:65:86:af:de:ce:7a:a6:3e:0a:b2:9b:81:97:97:5c:c2:ff:d2:a7

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate autodiscover.irvn.nl

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for autodiscover.irvn.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.irvn.nl
autodiscover.50pluspartij.nijmegen.nl
autodiscover.bergendal.nl
autodiscover.beuningen.nl
autodiscover.cda.mookenmiddelaar.nl
autodiscover.cda.nijmegen.nl
autodiscover.d66.nijmegen.nl
autodiscover.denijmeegsefractie.nijmegen.nl
autodiscover.dgp.mookenmiddelaar.nl
autodiscover.druten.nl
autodiscover.drutenwijchen.nl
autodiscover.gemwaalsprong.nijmegen.nl
autodiscover.gewoonnijmegen.nijmegen.nl
autodiscover.groenlinks.mookenmiddelaar.nl
autodiscover.groenlinks.nijmegen.nl
autodiscover.heumen.nl
autodiscover.liberaal.nijmegen.nl
autodiscover.mookenmiddelaar.nl
autodiscover.munitax.nl
autodiscover.nijmegen.nl
autodiscover.nijmegennu.nijmegen.nl
autodiscover.odrn.nl
autodiscover.partijvoordedieren.nijmegen.nl
autodiscover.projectbureauglz.nl
autodiscover.pvda.mookenmiddelaar.nl
autodiscover.pvda.nijmegen.nl
autodiscover.raadwijchen.nl
autodiscover.regiorvn.nl
autodiscover.sociaalwijkteamwijchen.nl
autodiscover.sp.nijmegen.nl
autodiscover.sportbedrijfbergendal.nl
autodiscover.stadspartij.nijmegen.nl
autodiscover.stadspartijdnf.nijmegen.nl
autodiscover.vsp.nijmegen.nl
autodiscover.vvd.mookenmiddelaar.nl
autodiscover.vvd.nijmegen.nl
autodiscover.wbrn.nl
autodiscover.wijchen.nl
autodiscover.zwembadgroesbeek.nl
hybrid.irvn.nl
imap.irvn.nl
imap.nijmegen.nl
smtp01.irvn.nl
smtp02.irvn.nl
webmail.irvn.nl

Other certificates including the domain name irvn.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for autodiscover.irvn.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFWbR+tr0ObdcEJiS0UD
o/Dz+ABqQH+eSaxHkZX7ToRbXfZfwJz34uAP2qZIkg8xskLyOKijwzgWqIVtRGZv
t/Xc3Y7BfDzrTlo+P5Sd3siF9kJzTnYPPUCB5qvXeX2LX5EJO1sNmS2GlQRhtV1G
nuYBohH+03N2WD1rNs6pL77FgFu6KMcUD/tZ14P3THCpdDqp2vfvJccuKwoOdtTI
KON8okZPbR4zZyAUP0+NVuCmAZeNoarFimqfsLw4qcgKZ6mxrj7C1KlRJZMZH607
VK0ZLhM6SBeoI1Qap5iVt/9zA9BpXfnRugupVIJ0T41LQu5f6nE2V7KLHHAGoDyQ
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189639785649988948639637282447800896614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6534 AD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nijmegen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nieuwe Dukenburgseweg 21 A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Modulaire Gemeenschappelijke regeling Rijk van Nijmegen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Functioneel Beheer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autodiscover.irvn.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24279968724598590240132626014640949789501605772355509622661547490763780364907794994514345551643351718574712827555260278779732089890818071188414729421762264921798463113317879412914998020119492682789540907047270883802874891489792207460355907212605736798299305011741684829200044471687994268108396776136445557825246208071068105306533011383473950408704361150122643085964197194821940014404711362590833069775983568256996682261796959024466934102279958471468827993137493813553399111579364340690299254219796662500824574977926217214307799389489479756182988028082566358513211692651755883966048971891590779650662746115783660441707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							745d4a1c44818d70d90e6b9dac2be4c022ef627e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000175ad6735640000040300483046022100cd4c134bbebd00045c4552a709b6347394da117172504bb68e0bf9bc3690edc9022100f05dcc18641e91588cbd08937c8c7576181c3a47b43e883eac7904d8e2b080930075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000175ad67358c0000040300463044022013f7399a300556c9360046d2dd32ec4f07fab1fcdb0355960dd0f6a5eb3aa5c10220262f4911224849d88d3cd028fa23befb7ca9646820601dad9dbbffd1a4d47bb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.50pluspartij.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bergendal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.beuningen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cda.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cda.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.d66.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.denijmeegsefractie.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dgp.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.druten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drutenwijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gemwaalsprong.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gewoonnijmegen.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.groenlinks.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.groenlinks.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.heumen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.liberaal.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.munitax.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nijmegennu.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.odrn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.partijvoordedieren.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.projectbureauglz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pvda.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pvda.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.raadwijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.regiorvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sociaalwijkteamwijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sp.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sportbedrijfbergendal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stadspartij.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stadspartijdnf.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vsp.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vvd.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vvd.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wbrn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zwembadgroesbeek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp01.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp02.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.irvn.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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