wopa.kpn.net

- Koninklijke KPN N.V. -

Issued by KPN PKIoverheid EV CA

About this certificate

This digital certificate with serial number 64:22:2d:7a:af:c9:c2:3f was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Koninklijke KPN N.V.

Company registration number: 02045200
Organization: Koninklijke KPN N.V.
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 64:22:2d:7a:af:c9:c2:3f
Serial Number (int): 7215379557959451199
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 54:3c:1c:25:59:a4:fe:49:f2:10:3e:90:23:75:38:f6:59:b7:c0:23
AuthorityKeyId: 80:03:85:b0:a7:63:92:df:1c:7f:5f:28:f2:5d:9d:1c:ee:bb:4c:08

Fingerprint (sha1): c9:36:8d:ae:ce:1b:65:a9:7c:8d:28:48:b4:39:02:50:8d:08:56:e5
Fingerprint (sha256): 73:90:10:84:aa:c1:39:59:28:34:f3:d2:d7:8a:0b:63:aa:23:d1:fd:d7:b5:44:22:51:fa:34:80:12:18:95:1f

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNPKIoverheidEVCA.cer

Revocation information

OCSP Server: http://evocsp1.managedpki.com
CRL Distribution Point: http://evcrl1.managedpki.com/KPNPKIoverheidEVCA/LatestCRL.crl

Check the revocation status for certificate wopa.kpn.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wopa.kpn.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wopa.kpn.net

Other certificates including the domain name kpn.net

(limited to 100 certificates)
rt2-vlg-1.pmr.kpn.net
zandvoort3.ZIPB.kpn.net
texel1.zipb.kpn.net
texel1.zipb.kpn.net
wopatest.kpn.net
www.kpn.net
test.diensten.monitoring.kpn.net
www.kpn.net
vlissingen1.ZIPB.kpn.net
zandvoort3.zipb.kpn.net
prmnp1.pmr.kpn.net
diensten.monitoring.kpn.net
zierikzee1.zipb.kpn.net
pem.kpn.net
zandvoort3.kpn.net
tenrvlissingen1.kpn.net
86-88-48-103.fixed.kpn.net
webmail.kpn.net
77-163-140-51.fixed.kpn.net
vpnaccess.oam.kpn.net
www.kpn.net
wdaht.pmr.kpn.net
pmht.pmr.kpn.net
prmnp2.pmr.kpn.net
gemnr2.pmr.kpn.net
wopa.kpn.net
tenrzandvoort3.kpn.net
webmail.kpn.net
diensten.monitoring.kpn.net
zandvoort1.kpn.net
dot.kpn.com
asd2-vlg-1.pmr.kpn.net
vlissingen1.kpn.net
citrixportal.ttrc.oam.kpn.net
gouda0-rt.cust.kpn.net
test.diensten.monitoring.kpn.net
zandvoort3.kpn.net
www.kpn.net
zandvoort3.kpn.net
gemnp1.pmr.kpn.net
test.diensten.monitoring.kpn.net
vlissingen1.ZIPB.kpn.net
www.kpn.net
wopa.kpn.net
wopatest.kpn.net
texel1.zipb.kpn.net
wopatest.kpn.net
tenrzandvoort3.zipb.kpn.net
77-169-194-218.fixed.kpn.net
gemnp2.pmr.kpn.net
89-163-151-197.mobile.kpn.net
77-163-140-51.fixed.kpn.net
gemnr1.pmr.kpn.net
213-10-121-183.fixed.kpn.net
prmnr1.pmr.kpn.net
www.kpn.net
www.kpn.net
www.kpn.net
86-84-188-139.fixed.kpn.net
aht.pmr.kpn.net
rt2-vlg-1.pmr.kpn.net
vlissingen1.zipb.kpn.net
zierikzee1.zipb.kpn.net
texel1.zipb.kpn.net
wopa.kpn.net
wopatest.kpn.net
zandvoort3.zipb.kpn.net
prmnr2.pmr.kpn.net
tenrzandvoort1.zipb.kpn.net
gst.pmr.kpn.net
gouda0-asd.cust.kpn.net
diensten.monitoring.kpn.net
clht.pmr.kpn.net
www.kpn.net
plht.pmr.kpn.net
*.pmr.kpn.net
www.kpn.net
pst.pmr.kpn.net
vpnaccess.oam.kpn.net
wopa.kpn.net
citrixportal.oam.kpn.net
www.kpn.net
test.diensten.monitoring.kpn.net
www.kpn.net
groningen1-rt.cust.kpn.net
vlissingen1.kpn.net
vpnaccess.oam.kpn.net
diensten.monitoring.kpn.net
tenrtexel1.zipb.kpn.net
texel1.zipb.kpn.net
test.diensten.monitoring.kpn.net
tenrzandvoort1.kpn.net
vlissingen1.kpn.net
avds.monitoring.kpn.net
zierikzee1.zipb.kpn.net
groningen1-asd.cust.kpn.net
cri.pmr.kpn.net
sntpf.pmr.kpn.net
wopa.kpn.net
texel1.zipb.kpn.net

Certificate

The complete raw certificate details for wopa.kpn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV9pQVpuaH1Hn4v5K4Ks
jxpviC18SRIox2HAl8NX2p4yzSI7UnCCQqI2LONQZ7M3iQMYXRkCwxGljm2hwgBn
t4/uf3PzW+aKkObHY9bDdu2FWZmlDQeLOd1TgiZCFxG3XXxPH/ZHrYMqgMi7EuAD
F3AYW0vIC2nDKTVEiYAnaXJqJcsMAr6ITNiEyGBJ58rfUbFCW65Ky7yjF9rg08pE
HqXqM7UWzEM54D8sIZssICn5MGak3aKYDBP1+OsIbYydoWodvddS/4YOXkIWl4pc
KThkirahmIZ2OmYpEwr3n/LFVb5jPRBxObAk5Zc2rjKl2EeOmo3a+vta9IGduNn3
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7215379557959451199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN PKIoverheid EV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-23 12:30:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 12:30:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koninklijke KPN N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02045200'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wopa.kpn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22896182192168428351644733076638178644602461190951734101581060714714746194411282292905937468741118096919945820786288387385577939657687477208042236114890088086825930995053449382212107200360327441518394341305711709948427101619980414347424808620446285069223225357361308411396999988323595141775847029173095819967935185156372644656866579308714038504672703402711778293738588386760285489740833941028098595504878683705589551629138229254927248336043625991600713204579656023309263656251968162340527202135588835835227483975875887363146099686638784461366614070033750683172047669988464005515478173165617863828442793133230268217161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNPKIoverheidEVCA.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://evocsp1.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							543c1c2559a4fe49f2103e90237538f659b7c023
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 800385b0a76392df1c7f5f28f25d9d1ceebb4c08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/elektronische-opslagplaats'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het EV CPS PKIoverheid van KPN van toepassing. The KPN Extended Validation PKIoverheid CPS applies to this certificate.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://evcrl1.managedpki.com/KPNPKIoverheidEVCA/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wopa.kpn.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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