pkio.signicat.nl
- Connected Information Systems B.V. -
Issued by QuoVadis PKIoverheid Server CA 2020
About this certificate
This digital certificate with serial number 63:70:59:26:05:15:7c:d7:21:55:e6:19:2f:85:1d:20:c5:1f:34:3e was issued on by QuoVadis Trustlink B.V..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Connected Information Systems B.V.
Company registration number:
00000003244440010000
Organization: Connected Information Systems B.V.
Organization: Connected Information Systems B.V.
State / Province:
Zuid-Holland
Locality: Rotterdam
Country: NL
Locality: Rotterdam
Country: NL
QuoVadis Trustlink B.V.
Organization:
QuoVadis Trustlink B.V.
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 63:70:59:26:05:15:7c:d7:21:55:e6:19:2f:85:1d:20:c5:1f:34:3eSerial Number (int): 567695535704731122624662860230166293832957637694
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: ff:ff:e2:e7:46:03:87:3e:70:9e:e4:c5:80:87:0d:78:66:f7:4a:0e
AuthorityKeyId: 22:b7:3d:c0:4e:66:6f:58:a8:73:b0:12:df:ff:bb:d3:8e:13:98:e7
Fingerprint (sha1): 5c:77:75:8d:b6:9d:d5:5a:db:5b:39:ec:5e:12:f9:b0:23:b4:7f:f0
Fingerprint (sha256): 5f:87:82:6d:f1:4c:66:4f:e3:5e:cd:08:3c:66:81:c2:48:c0:b1:40:ec:19:aa:ca:e6:d5:9d:28:4f:21:01:d7
Issuing Certificate URL: http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl
Check the revocation status for certificate pkio.signicat.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pkio.signicat.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pkio.signicat.nl
pkio-x509.signicat.nl
pkio-x509.signicat.nl
Other certificates including the domain name signicat.nl
(limited to 100 certificates)
eh01.dev.signicat.nl
sso.dev.signicat.nl
sphonic.com
sso.dev.signicat.nl
demo-inloggen-sign.signicat.nl
developer.signicat.com
eh.pre.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
documentation.signicat.nl
sso.dev.signicat.nl
e2e-broker-pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
eh.qa.signicat.nl
signicat.nl
eh01.dev.signicat.nl
demo-inloggen.signicat.nl
www.sphonic.com
nonprod-idin-disp-signing01.signicat.nl
documentation.signicat.nl
eh01.dev.signicat.nl
demo-sign.signicat.nl
organisatiegegevens.signicat.nl
sso.dev.signicat.nl
demo-sign.signicat.nl
developer.signicat.com
eh-dc.pre.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
rd.signicat.nl
sso.dev.signicat.nl
pkio-otc.signicat.nl
sso.dev.signicat.nl
eh01.signicat.nl
www.signicat.nl
signicat.nl
eh01.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
eh.signicat.nl
eh-dc.pre.signicat.nl
pilot-ideal.signicat.nl
signicat.nl
e2e-broker-pkio.signicat.nl
eh01.dev.signicat.nl
eh.signicat.nl
eh01.signicat.nl
eh.qa.signicat.nl
sso.dev.signicat.nl
eh01.dev.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh.signicat.nl
eh01.dev.signicat.nl
developer.signicat.com
www.signicat.nl
eh.pre.signicat.nl
sso.dev.signicat.nl
eh01.pre.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
pkio.signicat.nl
eh01.dev.signicat.nl
documentation.signicat.nl
eh01.signicat.nl
demo-sign.signicat.nl
demo-sign.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
www.signicat.nl
organisatiegegevens.signicat.nl
demo-inloggen.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
developer.signicat.com
eh.pre.signicat.nl
e2e-config-app-pkio.signicat.nl
pilot-ideal.signicat.nl
e2e-broker-pkio.signicat.nl
demo-inloggen-forms.signicat.nl
organisatiegegevens.signicat.nl
nonprod-idin-disp-signing01.signicat.nl
organisatiegegevens.signicat.nl
signicat.nl
developer.signicat.com
sso.dev.signicat.nl
sphonic.com
sso.dev.signicat.nl
demo-inloggen-sign.signicat.nl
developer.signicat.com
eh.pre.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
documentation.signicat.nl
sso.dev.signicat.nl
e2e-broker-pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
eh.qa.signicat.nl
signicat.nl
eh01.dev.signicat.nl
demo-inloggen.signicat.nl
www.sphonic.com
nonprod-idin-disp-signing01.signicat.nl
documentation.signicat.nl
eh01.dev.signicat.nl
demo-sign.signicat.nl
organisatiegegevens.signicat.nl
sso.dev.signicat.nl
demo-sign.signicat.nl
developer.signicat.com
eh-dc.pre.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
rd.signicat.nl
sso.dev.signicat.nl
pkio-otc.signicat.nl
sso.dev.signicat.nl
eh01.signicat.nl
www.signicat.nl
signicat.nl
eh01.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
eh.signicat.nl
eh-dc.pre.signicat.nl
pilot-ideal.signicat.nl
signicat.nl
e2e-broker-pkio.signicat.nl
eh01.dev.signicat.nl
eh.signicat.nl
eh01.signicat.nl
eh.qa.signicat.nl
sso.dev.signicat.nl
eh01.dev.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh.signicat.nl
eh01.dev.signicat.nl
developer.signicat.com
www.signicat.nl
eh.pre.signicat.nl
sso.dev.signicat.nl
eh01.pre.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
pkio.signicat.nl
eh01.dev.signicat.nl
documentation.signicat.nl
eh01.signicat.nl
demo-sign.signicat.nl
demo-sign.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
www.signicat.nl
organisatiegegevens.signicat.nl
demo-inloggen.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
developer.signicat.com
eh.pre.signicat.nl
e2e-config-app-pkio.signicat.nl
pilot-ideal.signicat.nl
e2e-broker-pkio.signicat.nl
demo-inloggen-forms.signicat.nl
organisatiegegevens.signicat.nl
nonprod-idin-disp-signing01.signicat.nl
organisatiegegevens.signicat.nl
signicat.nl
developer.signicat.com
Certificate
The complete raw certificate details for pkio.signicat.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIISDCCBjCgAwIBAgIUY3BZJgUVfNchVeYZL4UdIMUfND4wDQYJKoZIhvcNAQEL BQAwXTELMAkGA1UEBhMCTkwxIDAeBgNVBAoMF1F1b1ZhZGlzIFRydXN0bGluayBC LlYuMSwwKgYDVQQDDCNRdW9WYWRpcyBQS0lvdmVyaGVpZCBTZXJ2ZXIgQ0EgMjAy MDAeFw0yMTEwMTExMzUwMTdaFw0yMjEwMTExNDAwMDBaMIGfMR0wGwYDVQQFExQw MDAwMDAwMzI0NDQ0MDAxMDAwMDELMAkGA1UEBhMCTkwxFTATBgNVBAgMDFp1aWQt SG9sbGFuZDESMBAGA1UEBwwJUm90dGVyZGFtMSswKQYDVQQKDCJDb25uZWN0ZWQg SW5mb3JtYXRpb24gU3lzdGVtcyBCLlYuMRkwFwYDVQQDDBBwa2lvLnNpZ25pY2F0 Lm5sMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmeZzzX17JmBsScYX rEaZWL40rgRR6xB4HVaG9gdBrz/Hxy7J+DiL6jE9p6QJe1+KszW7hMkOKbyHGZsY 9Te2lHYdBMRwIFMOX8yD7/v3jTo2UNZdBwVvyob8UecbvN516NfwtYh/K+bbw3yQ kQbFayH8jJ31buiBrUaEy5VRmX074iNTOfY6QN/MDK3taL/wwyN5RicZcc5B0mcN 0NuQGF38/BqFr1UIeMnNqQNF+tHQSDx7yNo2ho4iFiQqjxJCuguFU0X1CPqJB00y l6c12ebQOWpJEsq0jJ2yhrHmgHs5rG6/6uVbNLEPE09RoeXeRosGk6rtBZE1HmoN 3yGzRTni6AwVJ7wNRSZ7MdGTvJ4WZI3dREjdoXzO4aIndVx2hZtDWDMzySlIdUwb VbvFgxtAaqI847kmemJ0Sb84b2fnI83gTfUUR0Dy+xjREFhI7mVYYpN1QJIO9tTp e+n/LHSNbUQx0eGMxZFNeWGWgja2cn7cu21qWZPOqPx0BQX1PvNKuswlQp4EYcUz QEw+DB26goEoPxwugirY0aSaWeXpNJY4DTdEI5ObTdipejEVZxKylLo6PU+G/5Qn zkdmMTZTxKusBT4HEySNSZl4VDz6vkL5j/Xk1KlUDR3FLLnKm1iBCzITkK5W8p9i bxKGDLYdMkwwrpRMlVqh5E/Xmm0CAwEAAaOCArswggK3MB8GA1UdIwQYMBaAFCK3 PcBOZm9YqHOwEt//u9OOE5jnMIGLBggrBgEFBQcBAQR/MH0wTwYIKwYBBQUHMAKG Q2h0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXVvdmFkaXNwa2lvdmVy aGVpZHNlcnZlcmNhMjAyMC5jcnQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnF1 b3ZhZGlzZ2xvYmFsLmNvbTAyBgNVHREEKzApghBwa2lvLnNpZ25pY2F0Lm5sghVw a2lvLXg1MDkuc2lnbmljYXQubmwwggEZBgNVHSAEggEQMIIBDDCB/wYKYIQQAYdr AQIFCTCB8DA1BggrBgEFBQcCARYpaHR0cHM6Ly93d3cucXVvdmFkaXNnbG9iYWwu Y29tL3JlcG9zaXRvcnkwgbYGCCsGAQUFBwICMIGpDIGmUmVsaWFuY2Ugb24gdGhp cyBjZXJ0aWZpY2F0ZSBieSBhbnkgcGFydHkgYXNzdW1lcyBhY2NlcHRhbmNlIG9m IHRoZSByZWxldmFudCBRdW9WYWRpcyBDZXJ0aWZpY2F0aW9uIFByYWN0aWNlIFN0 YXRlbWVudCBhbmQgb3RoZXIgZG9jdW1lbnRzIGluIHRoZSBRdW9WYWRpcyByZXBv c2l0b3J5LjAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB MFIGA1UdHwRLMEkwR6BFoEOGQWh0dHA6Ly9jcmwucXVvdmFkaXNnbG9iYWwuY29t L3F1b3ZhZGlzcGtpb3ZlcmhlaWRzZXJ2ZXJjYTIwMjAuY3JsMB0GA1UdDgQWBBT/ /+LnRgOHPnCe5MWAhw14ZvdKDjAOBgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIE AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBAHxvKNp3l9tFD5pmfg91dIStkedk 7K4upnhdMQJHYvkfB4wrQuml59YyAcJASN3lb33LQ1DDfKkdDXWQqv9XDY/uI6MU SsYEeUsuLx/U441xfy6ERoPmkXRMpAHAoV8bRb3xjuzlh7rlP1QW684suhG8Vd// iDzS/4Vwa06Oh71GwirmOU6gXLFsUbYdxvf/1bEqa8BOBok6iO2qv93bb4hyLBq8 UdPJONQoGNg3UYKQiENetlmBfw1VDemTpUaXDPn5GkoEMfaw/HgzdFnz0KtRmV1D 9lCoXMMAcnRhlvwc1xSmp+zzC5A34PSOm715j6H29/XQ5D3Tn7R6LurtjXtIvhV/ H35IfZJ05xzUCB4ilZKZQ5sZI3bKB46RL0P2MvpjNGvLPMThUlRc9EWgNa0T5Jmn AHQG5GBbSQ7XJMN5uclZ3KGU0xQf27Vunn+NcWCOs2k5uzxz/iKJzvuXDKbHEpow 2qaCvLGyrMyOliDZDCMbUusVjL2p1sE/U4wZkBO5OeC/uKRwvJG0ITSmVyWSwpQH CAo0WcJIy/F7UlMjD/p7YBTzi+8WNhBy1fpVrDQeokerGKFy6rAwvxRFuVH0rpB2 G87mQWzpIcvtbLufYPL3n+XEnC0vQRGkVTpOmxqbgu8/rDJpnOz1kNw9DTYm3oxy sMnHgtBVXSiN7uvr -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmeZzzX17JmBsScYXrEaZ WL40rgRR6xB4HVaG9gdBrz/Hxy7J+DiL6jE9p6QJe1+KszW7hMkOKbyHGZsY9Te2 lHYdBMRwIFMOX8yD7/v3jTo2UNZdBwVvyob8UecbvN516NfwtYh/K+bbw3yQkQbF ayH8jJ31buiBrUaEy5VRmX074iNTOfY6QN/MDK3taL/wwyN5RicZcc5B0mcN0NuQ GF38/BqFr1UIeMnNqQNF+tHQSDx7yNo2ho4iFiQqjxJCuguFU0X1CPqJB00yl6c1 2ebQOWpJEsq0jJ2yhrHmgHs5rG6/6uVbNLEPE09RoeXeRosGk6rtBZE1HmoN3yGz RTni6AwVJ7wNRSZ7MdGTvJ4WZI3dREjdoXzO4aIndVx2hZtDWDMzySlIdUwbVbvF gxtAaqI847kmemJ0Sb84b2fnI83gTfUUR0Dy+xjREFhI7mVYYpN1QJIO9tTpe+n/ LHSNbUQx0eGMxZFNeWGWgja2cn7cu21qWZPOqPx0BQX1PvNKuswlQp4EYcUzQEw+ DB26goEoPxwugirY0aSaWeXpNJY4DTdEI5ObTdipejEVZxKylLo6PU+G/5Qnzkdm MTZTxKusBT4HEySNSZl4VDz6vkL5j/Xk1KlUDR3FLLnKm1iBCzITkK5W8p9ibxKG DLYdMkwwrpRMlVqh5E/Xmm0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 567695535704731122624662860230166293832957637694 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Server CA 2020' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-11 13:50:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 14:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003244440010000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rotterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Connected Information Systems B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pkio.signicat.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627858056391859901292940757811780947284157650861321838170858718265393233493098603637978885807547288585340552293321323522931160900754957035131885824756791299500092991620744614650991138710672941306808030808868757818960202873530847152502893506325925636075803644081966191058846955388389559258840985942750155528088070578963805978752462528820519881782143895417547685312721464980273450958552821818595270573106958427484497924418307852571401432393536549661435504425591609253329383775894983126554963216562734144555939574366444959513345720398973953838474078013626061764530788030941429966218448441218227166208509948079742535573815685931858663904145065034765390778281994269687810349913860314959374049719091125698010113613613840086203901352447070215502288997456847049010610282696620956762738174246625905189320139665236844523228995800950139735455869659716569733648160878028568223818993908269509681743107746893246097213676564020778780188626616685013632092628110170131842370174580558398579436634477099098715056967664059648973971532769973039381266543276938793134390176757995975756218025780676780326393158875601765505374690094800780011434026607788461130620473961687986709235452622679532106032686077194457157619468183044835573917970299947387143998380653 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22b73dc04e666f58a873b012dfffbbd38e1398e7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkio.signicat.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkio-x509.signicat.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository.' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ffffe2e74603873e709ee4c580870d7866f74a0e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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