pkio.signicat.nl

- Connected Information Systems B.V. -

Issued by QuoVadis PKIoverheid Server CA 2020

About this certificate

This digital certificate with serial number 63:70:59:26:05:15:7c:d7:21:55:e6:19:2f:85:1d:20:c5:1f:34:3e was issued on by QuoVadis Trustlink B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Connected Information Systems B.V.

Company registration number: 00000003244440010000
Organization: Connected Information Systems B.V.
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 63:70:59:26:05:15:7c:d7:21:55:e6:19:2f:85:1d:20:c5:1f:34:3e
Serial Number (int): 567695535704731122624662860230166293832957637694
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ff:ff:e2:e7:46:03:87:3e:70:9e:e4:c5:80:87:0d:78:66:f7:4a:0e
AuthorityKeyId: 22:b7:3d:c0:4e:66:6f:58:a8:73:b0:12:df:ff:bb:d3:8e:13:98:e7

Fingerprint (sha1): 5c:77:75:8d:b6:9d:d5:5a:db:5b:39:ec:5e:12:f9:b0:23:b4:7f:f0
Fingerprint (sha256): 5f:87:82:6d:f1:4c:66:4f:e3:5e:cd:08:3c:66:81:c2:48:c0:b1:40:ec:19:aa:ca:e6:d5:9d:28:4f:21:01:d7

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl

Check the revocation status for certificate pkio.signicat.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pkio.signicat.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pkio.signicat.nl
pkio-x509.signicat.nl

Other certificates including the domain name signicat.nl

(limited to 100 certificates)
eh01.dev.signicat.nl
sso.dev.signicat.nl
sphonic.com
sso.dev.signicat.nl
demo-inloggen-sign.signicat.nl
developer.signicat.com
eh.pre.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
documentation.signicat.nl
sso.dev.signicat.nl
e2e-broker-pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
eh.qa.signicat.nl
signicat.nl
eh01.dev.signicat.nl
demo-inloggen.signicat.nl
www.sphonic.com
nonprod-idin-disp-signing01.signicat.nl
documentation.signicat.nl
eh01.dev.signicat.nl
demo-sign.signicat.nl
organisatiegegevens.signicat.nl
sso.dev.signicat.nl
demo-sign.signicat.nl
developer.signicat.com
eh-dc.pre.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
rd.signicat.nl
sso.dev.signicat.nl
pkio-otc.signicat.nl
sso.dev.signicat.nl
eh01.signicat.nl
www.signicat.nl
signicat.nl
eh01.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
eh.signicat.nl
eh-dc.pre.signicat.nl
pilot-ideal.signicat.nl
signicat.nl
e2e-broker-pkio.signicat.nl
eh01.dev.signicat.nl
eh.signicat.nl
eh01.signicat.nl
eh.qa.signicat.nl
sso.dev.signicat.nl
eh01.dev.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh.signicat.nl
eh01.dev.signicat.nl
developer.signicat.com
www.signicat.nl
eh.pre.signicat.nl
sso.dev.signicat.nl
eh01.pre.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
pkio.signicat.nl
eh01.dev.signicat.nl
documentation.signicat.nl
eh01.signicat.nl
demo-sign.signicat.nl
demo-sign.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
www.signicat.nl
organisatiegegevens.signicat.nl
demo-inloggen.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
developer.signicat.com
eh.pre.signicat.nl
e2e-config-app-pkio.signicat.nl
pilot-ideal.signicat.nl
e2e-broker-pkio.signicat.nl
demo-inloggen-forms.signicat.nl
organisatiegegevens.signicat.nl
nonprod-idin-disp-signing01.signicat.nl
organisatiegegevens.signicat.nl
signicat.nl
developer.signicat.com

Certificate

The complete raw certificate details for pkio.signicat.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 567695535704731122624662860230166293832957637694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Server CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-11 13:50:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 14:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003244440010000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Connected Information Systems B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pkio.signicat.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627858056391859901292940757811780947284157650861321838170858718265393233493098603637978885807547288585340552293321323522931160900754957035131885824756791299500092991620744614650991138710672941306808030808868757818960202873530847152502893506325925636075803644081966191058846955388389559258840985942750155528088070578963805978752462528820519881782143895417547685312721464980273450958552821818595270573106958427484497924418307852571401432393536549661435504425591609253329383775894983126554963216562734144555939574366444959513345720398973953838474078013626061764530788030941429966218448441218227166208509948079742535573815685931858663904145065034765390778281994269687810349913860314959374049719091125698010113613613840086203901352447070215502288997456847049010610282696620956762738174246625905189320139665236844523228995800950139735455869659716569733648160878028568223818993908269509681743107746893246097213676564020778780188626616685013632092628110170131842370174580558398579436634477099098715056967664059648973971532769973039381266543276938793134390176757995975756218025780676780326393158875601765505374690094800780011434026607788461130620473961687986709235452622679532106032686077194457157619468183044835573917970299947387143998380653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22b73dc04e666f58a873b012dfffbbd38e1398e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkio.signicat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkio-x509.signicat.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffffe2e74603873e709ee4c580870d7866f74a0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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