autodiscover.irvn.nl

- Modulaire Gemeenschappelijke regeling Rijk van Nijmegen -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number de:10:54:03:4f:81:aa:82:12:08:b6:82:ff:54:0b:10 was issued on by Sectigo Limited.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Modulaire Gemeenschappelijke regeling Rijk van Nijmegen

Organization: Modulaire Gemeenschappelijke regeling Rijk van Nijmegen
Organization unit: Functioneel Beheer
State / Province: Gelderland
Locality: Nijmegen
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): de:10:54:03:4f:81:aa:82:12:08:b6:82:ff:54:0b:10
Serial Number (int): 295173395798685147718105133854208822032
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2a:a4:61:57:80:10:82:43:f7:d5:cf:8f:f6:1a:25:e1:97:3d:20:ad
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): a3:15:d8:bc:f2:68:1a:6a:76:d1:64:99:d5:36:23:93:e9:fa:25:30
Fingerprint (sha256): 79:32:f4:04:25:29:28:65:48:e7:a5:d2:bf:57:42:10:c3:8d:b4:ec:0e:d9:82:1d:b7:2a:ad:56:a6:c5:32:19

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate autodiscover.irvn.nl

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for autodiscover.irvn.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.irvn.nl
autodiscover.50pluspartij.nijmegen.nl
autodiscover.bergendal.nl
autodiscover.beuningen.nl
autodiscover.cda.mookenmiddelaar.nl
autodiscover.cda.nijmegen.nl
autodiscover.d66.nijmegen.nl
autodiscover.denijmeegsefractie.nijmegen.nl
autodiscover.dgp.mookenmiddelaar.nl
autodiscover.doejemee-rvn.nl
autodiscover.druten.nl
autodiscover.drutenwijchen.nl
autodiscover.gemwaalsprong.nijmegen.nl
autodiscover.gewoonnijmegen.nijmegen.nl
autodiscover.ggibnijmegen.nl
autodiscover.groenlinks.mookenmiddelaar.nl
autodiscover.groenlinks.nijmegen.nl
autodiscover.heumen.nl
autodiscover.liberaal.nijmegen.nl
autodiscover.mookenmiddelaar.nl
autodiscover.munitax.nl
autodiscover.natuurlijkgroen.mookenmiddelaar.nl
autodiscover.nijmegen.nl
autodiscover.nijmegennu.nijmegen.nl
autodiscover.odrn.nl
autodiscover.partijvoordedieren.nijmegen.nl
autodiscover.projectbureauglz.nl
autodiscover.pvda.mookenmiddelaar.nl
autodiscover.pvda.nijmegen.nl
autodiscover.raadwijchen.nl
autodiscover.regiorvn.nl
autodiscover.sociaalwijkteamwijchen.nl
autodiscover.sp.nijmegen.nl
autodiscover.sportbedrijfbergendal.nl
autodiscover.stadspartijdnf.nijmegen.nl
autodiscover.vvd.mookenmiddelaar.nl
autodiscover.vvd.nijmegen.nl
autodiscover.wbrn.nl
autodiscover.wijchen.nl
autodiscover.wijzijngroengezondeninbewegingnijmegen.nl
autodiscover.zwembadgroesbeek.nl
hybrid.irvn.nl
imap.irvn.nl
imap.nijmegen.nl
smtp01.irvn.nl
smtp02.irvn.nl
webmail.irvn.nl

Other certificates including the domain name irvn.nl

(limited to 100 certificates)
irvn.nl
zaaksysteem.data.irvn.nl
data.irvn.nl
govroam.irvn.nl
ftp.ggi.irvn.nl
eva.data.irvn.nl
irvn.nl
xs.irvn.nl
zsh.irvn.nl
djuma.data.irvn.nl
dg.irvn.nl
xs.irvn.nl
services.irvn.nl
dg.irvn.nl
mfa.irvn.nl
xs.irvn.nl
ftp.ggi.irvn.nl
support.irvn.nl
oc.irvn.nl
oc.irvn.nl
sts.irvn.nl
wizportaal.data.irvn.nl
webapps.irvn.nl
mfa.irvn.nl
autodiscover.irvn.nl
autodiscover.irvn.nl
samen.irvn.nl
login.irvn.nl
portal.irvn.nl
samen.irvn.nl
sts.irvn.nl
logon.irvn.nl
autodiscover.irvn.nl
wachtwoord.irvn.nl
irvn.nl
mfa.irvn.nl
govroam.irvn.nl
data.gemnet.irvn.nl
wizportaal.data.irvn.nl
portal.irvn.nl
ftp.irvn.nl
zaaksysteem.data.irvn.nl
govroam.irvn.nl
djuma.data.irvn.nl
micollab.irvn.nl
xs.irvn.nl
dg.irvn.nl
data-test.gemnet.irvn.nl
irvn.nl
autodiscover.irvn.nl
login.irvn.nl
eva.data.irvn.nl
dgtest.irvn.nl
wachtwoord.irvn.nl
autodiscover.irvn.nl
xs.irvn.nl
samen.irvn.nl
services.irvn.nl
logon.irvn.nl
xs.irvn.nl
webmail.irvn.nl
data-test.irvn.nl
ftp.irvn.nl
dgtest.irvn.nl
myprint.irvn.nl
xs.irvn.nl

Certificate

The complete raw certificate details for autodiscover.irvn.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILdjCCCl6gAwIBAgIRAN4QVANPgaqCEgi2gv9UCxAwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMTEyMDgwMDAwMDBaFw0yMzAxMDgyMzU5NTlaMIGzMQswCQYD
VQQGEwJOTDETMBEGA1UECBMKR2VsZGVybGFuZDERMA8GA1UEBxMITmlqbWVnZW4x
QDA+BgNVBAoTN01vZHVsYWlyZSBHZW1lZW5zY2hhcHBlbGlqa2UgcmVnZWxpbmcg
UmlqayB2YW4gTmlqbWVnZW4xGzAZBgNVBAsTEkZ1bmN0aW9uZWVsIEJlaGVlcjEd
MBsGA1UEAxMUYXV0b2Rpc2NvdmVyLmlydm4ubmwwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0m7Uli0/hZvFsjaSKaSOiZI1XjuKS4VZc0UvCKtPntnli
jNMgQvZedJDqD+peO7HDVcZsfcZoBiEIHbg2EuzLwknA+YJ9F8XevVs8Gi8x0Ry+
S1aSTeGlZtYQYj3rQm2bVVKv1pJK2TIx6NSX8BpwIAe24JggYn4gxRftRcwFMjRs
Ul3Y+JlKnOExSGGwXv7nwfqul7cIVVUg+WZOR907Jn5ZQOHvvGnBSqQfQbAPnt6o
BiSQZy/vBjAMFF6d14lIYW3G9K5DN6t6t+NHHDZPlE67Re5UjTHkurQXz/7SgLa8
OeTxGOe2g5sfn0CFYc6bgcsB4PprsSlszq+p42C/AgMBAAGjggefMIIHmzAfBgNV
HSMEGDAWgBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAdBgNVHQ4EFgQUKqRhV4AQgkP3
1c+P9hol4Zc9IK0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQEC
AQMEMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeB
DAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLnNlY3RpZ28uY29tL1Nl
Y3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3Js
MIGKBggrBgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGln
by5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2
ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMBMG
CisGAQQB1nkCBAMBAf8EAgUAMIIF0AYDVR0RBIIFxzCCBcOCFGF1dG9kaXNjb3Zl
ci5pcnZuLm5sgiVhdXRvZGlzY292ZXIuNTBwbHVzcGFydGlqLm5pam1lZ2VuLm5s
ghlhdXRvZGlzY292ZXIuYmVyZ2VuZGFsLm5sghlhdXRvZGlzY292ZXIuYmV1bmlu
Z2VuLm5sgiNhdXRvZGlzY292ZXIuY2RhLm1vb2tlbm1pZGRlbGFhci5ubIIcYXV0
b2Rpc2NvdmVyLmNkYS5uaWptZWdlbi5ubIIcYXV0b2Rpc2NvdmVyLmQ2Ni5uaWpt
ZWdlbi5ubIIrYXV0b2Rpc2NvdmVyLmRlbmlqbWVlZ3NlZnJhY3RpZS5uaWptZWdl
bi5ubIIjYXV0b2Rpc2NvdmVyLmRncC5tb29rZW5taWRkZWxhYXIubmyCHGF1dG9k
aXNjb3Zlci5kb2VqZW1lZS1ydm4ubmyCFmF1dG9kaXNjb3Zlci5kcnV0ZW4ubmyC
HWF1dG9kaXNjb3Zlci5kcnV0ZW53aWpjaGVuLm5sgiZhdXRvZGlzY292ZXIuZ2Vt
d2FhbHNwcm9uZy5uaWptZWdlbi5ubIInYXV0b2Rpc2NvdmVyLmdld29vbm5pam1l
Z2VuLm5pam1lZ2VuLm5sghxhdXRvZGlzY292ZXIuZ2dpYm5pam1lZ2VuLm5sgiph
dXRvZGlzY292ZXIuZ3JvZW5saW5rcy5tb29rZW5taWRkZWxhYXIubmyCI2F1dG9k
aXNjb3Zlci5ncm9lbmxpbmtzLm5pam1lZ2VuLm5sghZhdXRvZGlzY292ZXIuaGV1
bWVuLm5sgiFhdXRvZGlzY292ZXIubGliZXJhYWwubmlqbWVnZW4ubmyCH2F1dG9k
aXNjb3Zlci5tb29rZW5taWRkZWxhYXIubmyCF2F1dG9kaXNjb3Zlci5tdW5pdGF4
Lm5sgi9hdXRvZGlzY292ZXIubmF0dXVybGlqa2dyb2VuLm1vb2tlbm1pZGRlbGFh
ci5ubIIYYXV0b2Rpc2NvdmVyLm5pam1lZ2VuLm5sgiNhdXRvZGlzY292ZXIubmlq
bWVnZW5udS5uaWptZWdlbi5ubIIUYXV0b2Rpc2NvdmVyLm9kcm4ubmyCK2F1dG9k
aXNjb3Zlci5wYXJ0aWp2b29yZGVkaWVyZW4ubmlqbWVnZW4ubmyCIGF1dG9kaXNj
b3Zlci5wcm9qZWN0YnVyZWF1Z2x6Lm5sgiRhdXRvZGlzY292ZXIucHZkYS5tb29r
ZW5taWRkZWxhYXIubmyCHWF1dG9kaXNjb3Zlci5wdmRhLm5pam1lZ2VuLm5sghth
dXRvZGlzY292ZXIucmFhZHdpamNoZW4ubmyCGGF1dG9kaXNjb3Zlci5yZWdpb3J2
bi5ubIImYXV0b2Rpc2NvdmVyLnNvY2lhYWx3aWprdGVhbXdpamNoZW4ubmyCG2F1
dG9kaXNjb3Zlci5zcC5uaWptZWdlbi5ubIIlYXV0b2Rpc2NvdmVyLnNwb3J0YmVk
cmlqZmJlcmdlbmRhbC5ubIInYXV0b2Rpc2NvdmVyLnN0YWRzcGFydGlqZG5mLm5p
am1lZ2VuLm5sgiNhdXRvZGlzY292ZXIudnZkLm1vb2tlbm1pZGRlbGFhci5ubIIc
YXV0b2Rpc2NvdmVyLnZ2ZC5uaWptZWdlbi5ubIIUYXV0b2Rpc2NvdmVyLndicm4u
bmyCF2F1dG9kaXNjb3Zlci53aWpjaGVuLm5sgjZhdXRvZGlzY292ZXIud2lqemlq
bmdyb2VuZ2V6b25kZW5pbmJld2VnaW5nbmlqbWVnZW4ubmyCIGF1dG9kaXNjb3Zl
ci56d2VtYmFkZ3JvZXNiZWVrLm5sgg5oeWJyaWQuaXJ2bi5ubIIMaW1hcC5pcnZu
Lm5sghBpbWFwLm5pam1lZ2VuLm5sgg5zbXRwMDEuaXJ2bi5ubIIOc210cDAyLmly
dm4ubmyCD3dlYm1haWwuaXJ2bi5ubDANBgkqhkiG9w0BAQsFAAOCAQEAXZr6lvjw
WmzZUIdb92wXUrQBiiw3/hAX0n2I8sVPBPiR0fT7lqevYlXuM5zVHOFwvojEQiIJ
zZv31Dw6/bLQ9tFifbstw9S+CEX7Ieu7uUB/lBYp2cMKr9/mn4ZGTm7O02gdNmrR
bBO22uW1+PObgzzq6ebMPxbxBNceB5cgTQuC0uw+LBmRal6+l+mtxmfMmcSEvn/t
PVNuW7sZFrcBd1rIbkUObRwWswhCBMtYZj6vjJETM4hVLQlLaq4Ny8V16/Frfcve
aE01/ZC645pGtYjL0dOOYLWFhg9caM5LA631C3U1HRhbzkYncnReZfv1ag/mcDw+
xr4HuU9q3pShmQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJu1JYtP4WbxbI2kimkj
omSNV47ikuFWXNFLwirT57Z5YozTIEL2XnSQ6g/qXjuxw1XGbH3GaAYhCB24NhLs
y8JJwPmCfRfF3r1bPBovMdEcvktWkk3hpWbWEGI960Jtm1VSr9aSStkyMejUl/Aa
cCAHtuCYIGJ+IMUX7UXMBTI0bFJd2PiZSpzhMUhhsF7+58H6rpe3CFVVIPlmTkfd
OyZ+WUDh77xpwUqkH0GwD57eqAYkkGcv7wYwDBRendeJSGFtxvSuQzererfjRxw2
T5ROu0XuVI0x5Lq0F8/+0oC2vDnk8RjntoObH59AhWHOm4HLAeD6a7EpbM6vqeNg
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295173395798685147718105133854208822032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nijmegen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Modulaire Gemeenschappelijke regeling Rijk van Nijmegen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Functioneel Beheer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autodiscover.irvn.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22799677175201297230808419386476302921957867388457186209496860784656135860947597773475622258058057903781477698066507455261200758644769805151588364835336160751770909432251391646908332662143645848348347552223414382423929879123789330153634652888198600574758206212857325457091517668016869399648154403557974762743139001927168460158032240962348305043435866188127204685870079791293828445907441912539540559986468571786519410800788518057447542448842864741904018183464653866355581962711438693659491208746217902949299405539494742839082595629986065706260305289930768138918443541647122053966222555756277985338211377959124613685439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2aa4615780108243f7d5cf8ff61a25e1973d20ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1479 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.50pluspartij.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bergendal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.beuningen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cda.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cda.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.d66.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.denijmeegsefractie.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dgp.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.doejemee-rvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.druten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drutenwijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gemwaalsprong.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gewoonnijmegen.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ggibnijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.groenlinks.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.groenlinks.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.heumen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.liberaal.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.munitax.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.natuurlijkgroen.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nijmegennu.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.odrn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.partijvoordedieren.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.projectbureauglz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pvda.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pvda.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.raadwijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.regiorvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sociaalwijkteamwijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sp.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sportbedrijfbergendal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stadspartijdnf.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vvd.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vvd.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wbrn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wijzijngroengezondeninbewegingnijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zwembadgroesbeek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp01.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp02.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.irvn.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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