d1.platformrijksoverheid.nl

- Rijksoverheid -

Issued by QuoVadis PKIoverheid Server CA 2020

About this certificate

This digital certificate with serial number 45:70:a8:b0:58:66:11:59:2c:c0:63:3c:70:bb:73:c8:26:af:1d:4a was issued on by QuoVadis Trustlink B.V..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Rijksoverheid

Organization: Rijksoverheid
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 45:70:a8:b0:58:66:11:59:2c:c0:63:3c:70:bb:73:c8:26:af:1d:4a
Serial Number (int): 396432741520315500545307928283927846466941295946
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: cd:af:1b:7d:47:d5:18:d8:2a:ce:b8:96:62:89:b8:04:ef:e8:98:77
AuthorityKeyId: 22:b7:3d:c0:4e:66:6f:58:a8:73:b0:12:df:ff:bb:d3:8e:13:98:e7

Fingerprint (sha1): 56:8f:11:16:6d:ab:c4:63:cc:96:60:2e:69:93:8a:7b:11:2d:b2:da
Fingerprint (sha256): 62:40:ee:53:90:b4:f5:ea:cb:18:d8:69:a6:b8:bf:f0:09:0f:64:a5:02:00:d9:82:2f:45:2c:04:8e:c9:5f:f5

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl

Check the revocation status for certificate d1.platformrijksoverheid.nl

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for d1.platformrijksoverheid.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

d1.platformrijksoverheid.nl
ivd.nl
www.ivd.nl
feeds.ivd.nl
opendata.ivd.nl
expertisecentrummggz.nl
www.expertisecentrummggz.nl
feeds.expertisecentrummggz.nl
opendata.expertisecentrummggz.nl
braic.nl
www.braic.nl
feeds.braic.nl
opendata.braic.nl

Other certificates including the domain name platformrijksoverheid.nl

(limited to 100 certificates)
platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
opendata.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
onderzoek.rijksoverheid.nl
h1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
webanalyse.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
survey-collect.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
toegang.platformrijksoverheid.nl
a-toegang.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
performance.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
a-api.a-subscribe.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
survey.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
survey-cache.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
artifactory.rijksoverheid.nl
a-cms.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
vpn.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
c-cms.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
ps1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
api.subscribe.platformrijksoverheid.nl
cms.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
platformrijksoverheid.nl

Certificate

The complete raw certificate details for d1.platformrijksoverheid.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2Sd9oRA+StSW39FT+JB
HFDnVoFogWHJV0nKiqFvYM0LPyR1YkFJgZI0UKjiuEgo1j9d0/WszoeSfXk/bZpZ
CBDXqco0mJWRjlbyjIXfNShj9fNA1VzG+FbkZsS3SMW5jMkqJzKHOFHQs2MNZ31v
yUFROZV9MMbhUQHq+XB+XhoJb/e1FOd1KZ5F6ztsVsbZvi+rUKuCNhWPbxTsGiok
pXDd77rV4x5v75g5vCd58dhWvUcs8hmROOVCM0Ssv4AaFXR4xUwPLHACaAwMvRaD
53qgvzo8LIv9MAO3kVJFOVkIVPKxUoXrIDf0/njwI7Zehu/vveFZvWgf2lJRlyDb
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396432741520315500545307928283927846466941295946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Server CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-23 13:44:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-23 13:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksoverheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'd1.platformrijksoverheid.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31735430659500809996957478758053973390545739903266996726092612088078634132548612768215456620571657392310459090701985491791831576207003027060317157521860610128511346145974610584220551561708603045589070480066801936041305662525542077481505805473814329256496834914030387917715709852605675720661888775887618769167997268209696219620167432734248479776127951021408910373369027776875419549003791926799753337435356484446226029385393806001428522462901666277793373707551559973731588645729873845325665825610316189206141552920214678404374603619366300002753986548715865833240004184309673306747066521810531240784094503647912667437927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22b73dc04e666f58a873b012dfffbbd38e1398e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (262 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd1.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.ivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.ivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expertisecentrummggz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expertisecentrummggz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.expertisecentrummggz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.expertisecentrummggz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.braic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.braic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.braic.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 82 0 101 0 108 0 105 0 97 0 110 0 99 0 101 0 32 0 111 0 110 0 32 0 116 0 104 0 105 0 115 0 32 0 99 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 98 0 121 0 32 0 97 0 110 0 121 0 32 0 112 0 97 0 114 0 116 0 121 0 32 0 97 0 115 0 115 0 117 0 109 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 114 0 101 0 108 0 101 0 118 0 97 0 110 0 116 0 32 0 81 0 117 0 111 0 86 0 97 0 100 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 105 0 111 0 110 0 32 0 80 0 114 0 97 0 99 0 116 0 105 0 99 0 101 0 32 0 83 0 116 0 97 0 116 0 101 0 109 0 101 0 110 0 116 0 32 0 97 0 110 0 100 0 32 0 111 0 116 0 104 0 101 0 114 0 32 0 100 0 111 0 99 0 117 0 109 0 101 0 110 0 116 0 115 0 32 0 105 0 110 0 32 0 116 0 104 0 101 0 32 0 81 0 117 0 111 0 86 0 97 0 100 0 105 0 115 0 32 0 114 0 101 0 112 0 111 0 115 0 105 0 116 0 111 0 114 0 121 0 46]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdaf1b7d47d518d82aceb8966289b804efe89877
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001741b9911310000040300473045022100f483193a08ca74d35090c8b256b50ce45669e57daef8cd3ec7793a834a131bc602203a8ae0df9538a8b685b262a84f5ade373e191a9e4ea711dc08aa237889c1fabf0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001741b99117f0000040300473045022100eddb3c6b81f771ee2f63808db99a2c071d7e420afd7b55c64bcb2fc1f896fea00220327dc47f2729187506141b55aa539628e5b5ef93462ea43f559121dd37c8fba4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		002ce8734559c9acb282ed3002f11aeea9cc1200b1bd98db020126111b89c12235c73948c9f083660339d62fb6a9199cb32b7c469c8bd70cb8baad0c28096a524d4e8730bdb467973b944a9b9111e54ab728c12df566e4dc549ade7c960c03c797c99ddaec2ccab4c28939d10eee77df9087b9a16b773a489000501e7b903d8cd7d5cb798deccabdf6e87e1e5c847a342cf9de4acc987d4f036f86d8a46553c7505b586d52b546557da16eccdd61d3eb6c0398703230bad4a7aefb063e589f6ef986daa258347981e9df0c008694ee748c6ce2bfdbfc2054a472470ad61ad8b7ed697835ea9bcc26f3a6d743be27f64cb315221f71765ec9d462a4d9cb7cb4e883b86e4bd5a0714d76f1e120ad7b18973b40e80ef2dc111e5962305f08efbe231aa0ecf648cc1dcb92482fe72b4179fa53b80ae2ffae54dd6cd2605b5b7cbb683651521eba036a0e48cbaf8fd8ae20ee8e123c839de1da0cbc32f2350a02c4d7259e524ce8cf6f812fa5ad2b278f55c87481be6885435cd69db7ec991dfe5dd3baba534ef223f40fbf70f70d35aebff160fdf5af40e9c244d3cbffca02a36ed99f65e75e2a5d7c35c5469eb8c56b6f4ff98fd4aad424e0843fe3791f639f7529aa7012a189d6539e6fe508cf1364327f5b6dd21224fbbde696188e6792cab4e9500692f90a3cfe16ca019837e25abd5b4f84afdbd38af03d61fd40330a6256de5f