www.coulisse.com

- Coulisse B.V. -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 54:32:70:67:fc:38:3a:2a:cd:91:25:78:dd:ff:93:e5:87:67:96:b3 was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Coulisse B.V.

Company registration number: 00000003060674960000
Organization: Coulisse B.V.
State / Province: Overijssel
Locality: Enter
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 54:32:70:67:fc:38:3a:2a:cd:91:25:78:dd:ff:93:e5:87:67:96:b3
Serial Number (int): 480680053969494604529783516182321170241093605043
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 25:40:f7:55:d7:f0:02:ef:19:c8:4a:a7:ee:f4:a3:48:ad:88:b9:33
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): f4:51:2c:21:d2:30:1c:f7:4c:21:c3:1b:76:f4:dc:a5:7f:84:a1:8b
Fingerprint (sha256): 56:df:b9:94:5c:34:ff:ac:de:79:0e:d5:00:77:2d:7c:75:c6:1b:2f:6b:25:50:26:ba:08:fb:53:b8:39:11:9e

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3-2019.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate www.coulisse.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.coulisse.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.coulisse.com

Other certificates including the domain name coulisse.com

(limited to 100 certificates)
coulisse.com
go.coulisse.com
go.coulisse.com
coulisse.com
coulisse.com
go.coulisse.com
coulisse.com
coulisse.com
go.coulisse.com
chile.coulisse.com
coulisse.com
coulisse.com
chile.coulisse.com
coulisse.com
assist.pentest.partners
coulisse.com
www.coulisse.com
coulisse.com
coulisse.com
*.coulisse.com
helpdesk.coulisse.com
coulisse.com
coulisse.com
go.coulisse.com
ithelpdesk.dccoilireland.com
customers.coulisse.nl
coulisse.com
go.coulisse.com
chile.coulisse.com
workgroup.coulisse.com
ithelpdesk.dccoilireland.com
coulisse.com
go.coulisse.com
custommade.coulisse.com
*.coulisse.com
coulisse.com
coulisse.com
coulisse.bynder.com
coulisse.com
coulisse.com
go.coulisse.com
*.coulisse.com
coulisse.com
coulisse.com
coulisse.bynder.com
chile.coulisse.com
coulisse.com
www.coulisse.com
chile.coulisse.com
go.coulisse.com
coulisse.com
chile.coulisse.com
chile.coulisse.com
go.coulisse.com

Certificate

The complete raw certificate details for www.coulisse.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6vAOGGr8Mn97L65MnK/
049TkRP0AE7An2UtKAiQsjuiBViWZE9nqPv07jSvRYbjt++EcpRfbL4EdPyCT/NB
oRM203JWBXkI6SRnWi46924Yp1lts4dCRszzDqBvt6Q91FUFZRmdBuUCgB8eb3IL
6NJE2aGnw8WGzMQLQBluzs1Khr5NCQdcBCOr2yYuU4UaSc3/iCPQoQfdG5j2h7Fk
TIc3ZjgaOlbUo0/ElIzfpw5VaEfwzh4lzrlDuE6bWTsjDjv+Kq7Y0sLupBfczucT
q2144k5YdS/+0XMIMBODPeqnh3ZUAR5kDBOATYgoADv1gFU+Mq1wuoiQSvBUlSWv
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 480680053969494604529783516182321170241093605043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 11:40:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-29 11:40:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Overijssel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Enter'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Coulisse B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003060674960000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.coulisse.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17126864676208872569731691718181924679766163566975945369933885305563445752190549957372939328674030961396103458115828429688807378126588781572651644270495675089003523757713779591150545005569578491875463925370366717420674733203967642195412109341378880800101206440755812100590173738540598919698622377591878242237364473868576740891300175012878221299445945281879350728842620427837271127695183361211759155911227940561133636724511573062925454066500034477365095998594980310373937642608185643582688424165307148270237344486619355574331110003360701153717598861873004795342984214391627429527930924879895338585451770595969348251607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3-2019.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coulisse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2540f755d7f002ef19c84aa7eef4a348ad88b933
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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