sso.dev.signicat.nl
Issued by R3
About this certificate
This digital certificate with serial number 04:45:c3:3c:3a:4c:47:fe:74:d0:2d:d2:68:59:52:a2:17:f7 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sso.dev.signicat.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:45:c3:3c:3a:4c:47:fe:74:d0:2d:d2:68:59:52:a2:17:f7Serial Number (int): 372188139223998689667713608587616920410103
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 8b:e5:ef:23:cc:ac:0f:da:8c:50:85:fe:29:67:1d:44:8d:c5:cf:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): bb:8a:23:94:9d:47:89:10:c3:92:0e:23:55:b8:18:03:94:75:d5:20
Fingerprint (sha256): 60:27:02:ba:07:82:6e:02:fc:1f:30:3a:9d:68:83:1f:d8:0c:6e:f6:22:4d:89:7b:09:d7:52:1a:21:fa:20:a5
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sso.dev.signicat.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sso.dev.signicat.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sso.dev.signicat.nl
Other certificates including the domain name signicat.nl
(limited to 100 certificates)
eh01.dev.signicat.nl
sso.dev.signicat.nl
sphonic.com
sso.dev.signicat.nl
demo-inloggen-sign.signicat.nl
developer.signicat.com
eh.pre.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
documentation.signicat.nl
sso.dev.signicat.nl
e2e-broker-pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
eh.qa.signicat.nl
signicat.nl
eh01.dev.signicat.nl
demo-inloggen.signicat.nl
www.sphonic.com
nonprod-idin-disp-signing01.signicat.nl
documentation.signicat.nl
eh01.dev.signicat.nl
demo-sign.signicat.nl
organisatiegegevens.signicat.nl
sso.dev.signicat.nl
demo-sign.signicat.nl
developer.signicat.com
eh-dc.pre.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
rd.signicat.nl
sso.dev.signicat.nl
pkio-otc.signicat.nl
sso.dev.signicat.nl
eh01.signicat.nl
www.signicat.nl
signicat.nl
eh01.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
eh.signicat.nl
eh-dc.pre.signicat.nl
pilot-ideal.signicat.nl
signicat.nl
e2e-broker-pkio.signicat.nl
eh01.dev.signicat.nl
eh.signicat.nl
eh01.signicat.nl
eh.qa.signicat.nl
sso.dev.signicat.nl
eh01.dev.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh.signicat.nl
eh01.dev.signicat.nl
developer.signicat.com
www.signicat.nl
eh.pre.signicat.nl
sso.dev.signicat.nl
eh01.pre.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
pkio.signicat.nl
eh01.dev.signicat.nl
documentation.signicat.nl
eh01.signicat.nl
demo-sign.signicat.nl
demo-sign.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
www.signicat.nl
organisatiegegevens.signicat.nl
demo-inloggen.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
developer.signicat.com
eh.pre.signicat.nl
e2e-config-app-pkio.signicat.nl
pilot-ideal.signicat.nl
e2e-broker-pkio.signicat.nl
demo-inloggen-forms.signicat.nl
organisatiegegevens.signicat.nl
nonprod-idin-disp-signing01.signicat.nl
organisatiegegevens.signicat.nl
signicat.nl
developer.signicat.com
sso.dev.signicat.nl
sphonic.com
sso.dev.signicat.nl
demo-inloggen-sign.signicat.nl
developer.signicat.com
eh.pre.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
documentation.signicat.nl
sso.dev.signicat.nl
e2e-broker-pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
eh.qa.signicat.nl
signicat.nl
eh01.dev.signicat.nl
demo-inloggen.signicat.nl
www.sphonic.com
nonprod-idin-disp-signing01.signicat.nl
documentation.signicat.nl
eh01.dev.signicat.nl
demo-sign.signicat.nl
organisatiegegevens.signicat.nl
sso.dev.signicat.nl
demo-sign.signicat.nl
developer.signicat.com
eh-dc.pre.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
rd.signicat.nl
sso.dev.signicat.nl
pkio-otc.signicat.nl
sso.dev.signicat.nl
eh01.signicat.nl
www.signicat.nl
signicat.nl
eh01.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
eh.signicat.nl
eh-dc.pre.signicat.nl
pilot-ideal.signicat.nl
signicat.nl
e2e-broker-pkio.signicat.nl
eh01.dev.signicat.nl
eh.signicat.nl
eh01.signicat.nl
eh.qa.signicat.nl
sso.dev.signicat.nl
eh01.dev.signicat.nl
rd.signicat.nl
pkio.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
sso.dev.signicat.nl
eh.signicat.nl
eh01.dev.signicat.nl
developer.signicat.com
www.signicat.nl
eh.pre.signicat.nl
sso.dev.signicat.nl
eh01.pre.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
pkio.signicat.nl
eh01.dev.signicat.nl
documentation.signicat.nl
eh01.signicat.nl
demo-sign.signicat.nl
demo-sign.signicat.nl
sso.dev.signicat.nl
eh-dc.pre.signicat.nl
sso.dev.signicat.nl
organisatiegegevens.signicat.nl
developer.signicat.com
www.signicat.nl
organisatiegegevens.signicat.nl
demo-inloggen.signicat.nl
eh01.dev.signicat.nl
sso.dev.signicat.nl
idin-disp-signing01.signicat.nl
developer.signicat.com
developer.signicat.com
eh.pre.signicat.nl
e2e-config-app-pkio.signicat.nl
pilot-ideal.signicat.nl
e2e-broker-pkio.signicat.nl
demo-inloggen-forms.signicat.nl
organisatiegegevens.signicat.nl
nonprod-idin-disp-signing01.signicat.nl
organisatiegegevens.signicat.nl
signicat.nl
developer.signicat.com
Certificate
The complete raw certificate details for sso.dev.signicat.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgISBEXDPDpMR/500C3SaFlSohf3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA5MDIwNjU4MjdaFw0yMTEyMDEwNjU4MjZaMB4xHDAaBgNVBAMT E3Nzby5kZXYuc2lnbmljYXQubmwwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQDUc4v+Jj0Vx//5XYl8nlMb9KXcEPfAJCxXy+CYzr5/pBHC5fbegy1oOqqQ jbEgUARMXHPhS8L+5G9mT8M3XPpqdytxKdqDFxf+8mOgUzuP/uEiWHZ6sKkbtRpn YQMTFRB5VOw6T3vyDTD59WakXpvoc016eCb2nlSIvEEk15YVc5sKvPL2H9ehAwV7 jbHSHImXQGZK86inBmrbbI38sBj9vTf3jRZP7N3PtFs4CZHGnaMC90Ck5NHaLnkQ H1fOjuFVQOJOOq8EhbUEMC6ZsbBuUMSyLYh/TYXI8q80PyusFsN8rvFn6gY5Rwn2 ijce5fPjC77M0xLAdI1naMFEE1He/lsHRow1wxMuWryC+fjE+ya0cyvDqIdZCcaJ nxG0lQQKxdb4OOXrEifZqF7kgt0KOt37fVuDkV3X4EQhGmsdOTVwVFZQfo4+m91f syQHjkcWVD1j9d0P8PvMfqSG1kd7Y4/HHGGTECe4s4/hKJShKiKb+Pa5U8a8bi2S k9aXGsoqM7ZfW7fBHPTWqmvxOcXVK8VKmlCooIllcqfGIOB7f3TcHebpc3ka6rkv NuZJSSNb8WRJPK9X6FByUaM8fCbHxv0ayH9SlTWos8VK9R/zijz4zQPtTA/cC+Rq LclCmthhfw1vg1KC2m4qV+YPfrlWqpgdpjZW7drlysfplozO0wIDAQABo4ICTDCC AkgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSL5e8jzKwP2oxQhf4pZx1EjcXPNjAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzAeBgNVHREEFzAVghNzc28uZGV2LnNpZ25p Y2F0Lm5sMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHW eQIEAgSB8wSB8ADuAHUA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMA AAF7pYQq8QAABAMARjBEAiBOLZLth08mse5MVAwJkBxh6f5+otcgjvDgkO5r0P4C mAIgQo5EGJeSEiJ8GkwPUSGZTSxg6iGtKrf2fK70RtGl/zoAdQBvU3asMfAxGdiZ AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXulhCsnAAAEAwBGMEQCIA2w1pKWmisX iuqGA4bk1MbAKD8GY+I5BvFwOcbfDgrrAiBdTgoicbHyCNVn9H+VZYGDqN+ZDZu5 /9p2PLJJ97HrWDANBgkqhkiG9w0BAQsFAAOCAQEAWHGRpQ1pBClT59v3SzaYC3Cj dYaj4rEoHzqkYtl4NMa+8u9eJgIanHToBct5s6v4zVQKmwwNeWzifRZEZiA3qdRI Qrq5tmhCqQbIPAHKMzrsa5BgB3bavPnPIB77Eu8KB/VkgKognRd/d7JHaTmxABcb 5uHi02BzKhd4zM446joKZKaoIioqVXnPERy3aOIUQpcwB4aC/cyM+F8rtVIMWYRF YvXQPhnIEH7I5vvX0aYQXpuZNgcXFB77YTX2s6IvQoCVUAwuOiVI/3zpqMd6pwJk sny85U9vSOEtDzLmkavcuFb3CHAZAZpbvsj57P+3gqiWXsttn19SdGQEbtPBHg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1HOL/iY9Fcf/+V2JfJ5T G/Sl3BD3wCQsV8vgmM6+f6QRwuX23oMtaDqqkI2xIFAETFxz4UvC/uRvZk/DN1z6 ancrcSnagxcX/vJjoFM7j/7hIlh2erCpG7UaZ2EDExUQeVTsOk978g0w+fVmpF6b 6HNNengm9p5UiLxBJNeWFXObCrzy9h/XoQMFe42x0hyJl0BmSvOopwZq22yN/LAY /b03940WT+zdz7RbOAmRxp2jAvdApOTR2i55EB9Xzo7hVUDiTjqvBIW1BDAumbGw blDEsi2If02FyPKvND8rrBbDfK7xZ+oGOUcJ9oo3HuXz4wu+zNMSwHSNZ2jBRBNR 3v5bB0aMNcMTLlq8gvn4xPsmtHMrw6iHWQnGiZ8RtJUECsXW+Djl6xIn2ahe5ILd Cjrd+31bg5Fd1+BEIRprHTk1cFRWUH6OPpvdX7MkB45HFlQ9Y/XdD/D7zH6khtZH e2OPxxxhkxAnuLOP4SiUoSoim/j2uVPGvG4tkpPWlxrKKjO2X1u3wRz01qpr8TnF 1SvFSppQqKCJZXKnxiDge3903B3m6XN5Guq5LzbmSUkjW/FkSTyvV+hQclGjPHwm x8b9Gsh/UpU1qLPFSvUf84o8+M0D7UwP3Avkai3JQprYYX8Nb4NSgtpuKlfmD365 VqqYHaY2Vu3a5crH6ZaMztMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 372188139223998689667713608587616920410103 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-02 06:58:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-01 06:58:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso.dev.signicat.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866725909638897689693336430223744921028332905337234797974135245074489564170547223917506753378056983454775047554001800946950878413138208472519157006426394655800664664725102044533880331471181449196136400462277834060845304129535253907453012294240911704140345681005226388875349516549984032230347564533201734978309855830058214233256406586473932841754478594786679037683081262104920041306232887659219294550884393030476101810036689093149440080868906881054874580815184680894524179712925244595603892389038311382112489491708931293012485036769224167817743378250693733504342779363603042975288203610819538420011056311340426001628468302562512106868221384179251073586344751935128762999211849598689453283159228985487873965512591890759703121838643512904673879731897534045764684681208987970384782145980318777199883574897198404862027748285801813757630894720657677355338495516029505143064342224330403014659428642182801253616822475943830497636673537223355108094176952445001169981805325880918480873425134986269526214209537195216511202022851787567089998074479790618057861759739139559674406811013422242228799524096511647953455754688966992750190520021494831531428401387811045787762147490628467075010242479114537048746500351233759983668399445755907358967254739 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8be5ef23ccac0fda8c5085fe29671d448dc5cf36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.dev.signicat.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017ba5842af1000004030046304402204e2d92ed874f26b1ee4c540c09901c61e9fe7ea2d7208ef0e090ee6bd0fe02980220428e4418979212227c1a4c0f5121994d2c60ea21ad2ab7f67caef446d1a5ff3a0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017ba5842b27000004030046304402200db0d692969a2b178aea860386e4d4c6c0283f0663e23906f17039c6df0e0aeb02205d4e0a2271b1f208d567f47f95658183a8df990d9bb9ffda763cb249f7b1eb58 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00587191a50d69042953e7dbf74b36980b70a37586a3e2b1281f3aa462d97834c6bef2ef5e26021a9c74e805cb79b3abf8cd540a9b0c0d796ce27d1644662037a9d44842bab9b66842a906c83c01ca333aec6b90600776dabcf9cf201efb12ef0a07f56480aa209d177f77b2476939b100171be6e1e2d360732a1778ccce38ea3a0a64a6a8222a2a5579cf111cb768e214429730078682fdcc8cf85f2bb5520c59844562f5d03e19c8107ec8e6fbd7d1a6105e9b99360717141efb6135f6b3a22f428095500c2e3a2548ff7ce9a8c77aa70264b27cbce54f6f48e12d0f32e691abdcb856f7087019019a5bbec8f9ecffb782a8965ecb6d9f5f527464046ed3c11e