www.safetygroup.nl

- Safety Group B.V. -

Issued by KPN PKIoverheid Organisatie CA - G2

About this certificate

This digital certificate with serial number 08:2c:46:c0:8c:78:e1:26 was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Safety Group B.V.

Company registration number: 00000003081726590000
Organization: Safety Group B.V.
State / Province: Overijssel
Locality: Zwolle
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:2c:46:c0:8c:78:e1:26
Serial Number (int): 588923444083089702
Serial Number lenght: 60 bits, 8 octets

SubjectKeyId: 54:17:f8:7c:be:0e:b6:ae:cd:89:44:a7:0e:ee:4e:e4:6b:67:cf:d1
AuthorityKeyId: 75:a3:4e:8f:1e:97:dd:6c:88:01:31:ef:72:21:c2:6e:60:94:7d:80

Fingerprint (sha1): bc:13:44:1f:0d:b2:d1:90:a4:07:bb:6e:de:af:b5:94:fd:20:91:d7
Fingerprint (sha256): 89:ae:22:c7:47:96:9b:9e:3f:e3:21:80:c1:c6:38:f0:a0:5c:32:3a:b8:57:a9:25:c2:40:f4:66:06:6e:fb:f8

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer

Revocation information

OCSP Server: http://g2ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl

Check the revocation status for certificate www.safetygroup.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.safetygroup.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Email Protection
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.safetygroup.nl

Other certificates including the domain name safetygroup.nl

(limited to 100 certificates)
themeparkslive.watch
*.safetygroup.nl
*.safetygroup.nl
projectregistratie.safetygroup.nl
webmail.facilicom.com
sauvagenda.fr
*.safetygroup.nl
vikid.org
www.dusud.com.ar
www.jumbomumbo.chat
goromie.com.br
*.safetygroup.nl
api.ipi.hk
*.safetygroup.nl
iris-talk.com
*.safetygroup.nl
aspenbiz.app
contest.dropsolid.ai
sauvagenda.fr
links.engzketab.com
omnidata.accadis.net
abc.kakathink.com
move.elevolearning.com
test.skill.exchange
www.laxmienterprises.xyz
isurusranmohotti.tk
app.findz.app
*.safetygroup.nl
paragon-atlas.org
*.safetygroup.nl
ariskou.com
torrentfellas.com
mosevang-jelling.dk
joann.myphoto.com
projectbeheer.safetygroup.nl
estara.no
contest.dropsolid.ai
soniandsoni.legal
devopsmanager.app
web-logger.io
admin.doyumeibo.jp
*.safetygroup.nl
www.safetygroup.nl
lamthaison.site
geyiks.org
ultimatetournament.io
www.kleenos.com
*.safetygroup.nl
calltrackingtools.com
mta-sts.wusc.vn
qcut.openorders.app
e-igjs.com
zhifu.ca
www.wrfbroker.com.br
*.safetygroup.nl
*.safetygroup.nl
codingsanta.xyz
projectregistratie.safetygroup.nl
hoopee.co
webmail.facilicom.com
joann.myphoto.com
extralayer.org
*.safetygroup.nl
www.abrahamjagadeesh.com
www.chrisself.co
*.safetygroup.nl

Certificate

The complete raw certificate details for www.safetygroup.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPxzT1XwlF2MXBf2uBzz
JyyZvdjbEXpLT9zR+WwVSFPj5vLmQB9SAVc0LHDp/PPOuQUzlJYhe2SzgDzFnEJg
MPHUKfXffpYlmkCXtWpmrWGU2JeNtjMhpVmI7/I3z9g2sT5OmZTkF8Wz8zpTfTrG
a5jHY7XfvCnGivzhNo5vS0y0qmx10uWTKI0IUrmmUyHlgXdjCMxGFCRBqO+Bcf69
yDAyQGSEXxG20vfYS7fT7Zio8VOUsdFSY8woX9WvPN1ibf2FEU5RYzZpgXJxidVv
JY5qpJ48pLu72OIp9jI6ITiA0fAoacYb7la5MW+qvzqyuvWzyFTUQi0NMPzmfLy5
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 588923444083089702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN PKIoverheid Organisatie CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-23 14:50:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 14:50:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Overijssel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zwolle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Safety Group B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003081726590000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.safetygroup.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22847382840315941406801830389497583389502852221729432418134194027709858889428112298342758922976577939777227599516149504714275906574091311556710667087442602915317531549377458818152359337537619930886764338195199525704593414763542318189042854123718127056708892520940487058274931733098134919622786801669812044977411308098732353656431656576289934988953813920919590886753363293498934461703903226839877980812606219073730084108759826142416635540191989957140608517784906037191079254187987290899332593522249579126072439386133607713629497769281224932618279890961535730189406004084037962202538700803183248752654337753712737171841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g2ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5417f87cbe0eb6aecd8944a70eee4ee46b67cfd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 75a34e8f1e97dd6c880131ef7221c26e60947d80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safetygroup.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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