www.actan.nl

- Actan adviseurs en accountants B.V. -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 4d:4d:75:41:91:46:29:2e was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Actan adviseurs en accountants B.V.

Company registration number: 00000003340744030000
Organization: Actan adviseurs en accountants B.V.
State / Province: Noord-Holland
Locality: Hoofddorp
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:4d:75:41:91:46:29:2e
Serial Number (int): 5570237238597789998
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: bb:c7:c4:e6:f9:8c:c2:05:54:38:5f:0c:bd:83:6c:2e:cf:75:52:18
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): 6b:50:16:f2:8f:bb:d8:c9:d4:8b:43:9f:53:f0:72:97:9d:ce:0a:15
Fingerprint (sha256): 61:7e:a0:db:25:78:27:4f:20:50:f6:16:45:1c:21:14:e3:2d:7f:4a:20:30:90:bb:d6:5b:1f:74:34:ce:47:85

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate www.actan.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.actan.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.actan.nl

Other certificates including the domain name actan.nl

(limited to 100 certificates)
actan.nl
actan.nl
*.actan.nl
actan.nl
www.actan.nl
actan.nl
mail.actan.nl
actan.nl
*.actan.nl
*.actan.nl
actan.nl
actan.nl
actan.nl
actan.nl
actan.nl
mail.actan.nl
cloud.actan.nl
actan.nl
actan.nl
actan.nl
www.actan.nl
*.actan.nl

Certificate

The complete raw certificate details for www.actan.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRWz2O579pfDYULPqZen
dbLqZyUbuDQfzKUDNk5tJNc3eMswM/0QQJiFYb/TmctCNXO00JiVhqWhDb2Huq4V
62e/a7MBTz0NOCKlqpeE0ccTVomYepx0oNaoQkHQTGUAkQNLhpqEFdEzLpqQmqNz
Wy3E6Sd2YgIm97Pofmj3s2oqrGizSEM9sfMgP+tH4lk/dNVG8/FmpuAHP9L293yn
77uMWj8szCI9oATmWND2W64D6CbwfKeL5QICFlG2xkspxT4sVvzcAq853m1jnicu
avUEg991lqXC1rnqRkB0mz1p0Rv/6zhCNuUJinehqwRs5TOXTb2grH/3D1ubMGDP
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5570237238597789998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 11:00:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-25 11:00:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hoofddorp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actan adviseurs en accountants B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003340744030000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.actan.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20335069015383750735630131716419934753540970140561459936487410743797922020069447388399062126077212335273949297340056977205499916192825839101043799529396661177164818686225930926263053034559632458182802910978495326283899617665029845221398194528784745328623306242364255385507046845401441936661747944974101944900875533020055255518916385852952589511953776537882509099707334484896164855931152726319007214253134875045824291681440031103262934507629775102229377484837107004335037958184332718300136413085915642140889844052666479071982508118605630460988771451759620985719749678583804289565071786605847535082124902395411504877437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbc7c4e6f98cc20554385f0cbd836c2ecf755218
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actan.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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