wopa.kpn.net

- Koninklijke KPN N.V. -

Issued by KPN PKIoverheid EV CA

About this certificate

This digital certificate with serial number 64:22:2d:7a:af:c9:c2:3f was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Koninklijke KPN N.V.

Company registration number: 02045200
Organization: Koninklijke KPN N.V.
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 64:22:2d:7a:af:c9:c2:3f
Serial Number (int): 7215379557959451199
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 54:3c:1c:25:59:a4:fe:49:f2:10:3e:90:23:75:38:f6:59:b7:c0:23
AuthorityKeyId: 80:03:85:b0:a7:63:92:df:1c:7f:5f:28:f2:5d:9d:1c:ee:bb:4c:08

Fingerprint (sha1): 1f:c8:3e:34:62:a9:2b:c8:47:83:e6:3a:d7:a1:ad:fd:8e:e4:9a:36
Fingerprint (sha256): 8c:95:a6:47:1a:ca:e7:72:5f:43:f6:cf:22:8d:6c:1e:fc:79:ac:55:a5:bc:4d:03:d3:37:43:26:21:69:8b:e9

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNPKIoverheidEVCA.cer

Revocation information

OCSP Server: http://evocsp1.managedpki.com
CRL Distribution Point: http://evcrl1.managedpki.com/KPNPKIoverheidEVCA/LatestCRL.crl

Check the revocation status for certificate wopa.kpn.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wopa.kpn.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wopa.kpn.net

Other certificates including the domain name kpn.net

(limited to 100 certificates)
rt2-vlg-1.pmr.kpn.net
zandvoort3.ZIPB.kpn.net
texel1.zipb.kpn.net
texel1.zipb.kpn.net
wopatest.kpn.net
www.kpn.net
test.diensten.monitoring.kpn.net
www.kpn.net
vlissingen1.ZIPB.kpn.net
zandvoort3.zipb.kpn.net
prmnp1.pmr.kpn.net
diensten.monitoring.kpn.net
zierikzee1.zipb.kpn.net
pem.kpn.net
zandvoort3.kpn.net
tenrvlissingen1.kpn.net
webmail.kpn.net
vpnaccess.oam.kpn.net
www.kpn.net
wdaht.pmr.kpn.net
pmht.pmr.kpn.net
prmnp2.pmr.kpn.net
gemnr2.pmr.kpn.net
wopa.kpn.net
tenrzandvoort3.kpn.net
webmail.kpn.net
diensten.monitoring.kpn.net
zandvoort1.kpn.net
dot.kpn.com
asd2-vlg-1.pmr.kpn.net
vlissingen1.kpn.net
citrixportal.ttrc.oam.kpn.net
gouda0-rt.cust.kpn.net
test.diensten.monitoring.kpn.net
zandvoort3.kpn.net
www.kpn.net
zandvoort3.kpn.net
gemnp1.pmr.kpn.net
test.diensten.monitoring.kpn.net
vlissingen1.ZIPB.kpn.net
www.kpn.net
wopa.kpn.net
wopatest.kpn.net
texel1.zipb.kpn.net
wopatest.kpn.net
tenrzandvoort3.zipb.kpn.net
77-169-194-218.fixed.kpn.net
gemnp2.pmr.kpn.net
89-163-151-197.mobile.kpn.net
77-163-140-51.fixed.kpn.net
gemnr1.pmr.kpn.net
213-10-121-183.fixed.kpn.net
prmnr1.pmr.kpn.net
www.kpn.net
www.kpn.net
www.kpn.net
86-84-188-139.fixed.kpn.net
aht.pmr.kpn.net
rt2-vlg-1.pmr.kpn.net
vlissingen1.zipb.kpn.net
zierikzee1.zipb.kpn.net
texel1.zipb.kpn.net
wopa.kpn.net
wopatest.kpn.net
zandvoort3.zipb.kpn.net
prmnr2.pmr.kpn.net
tenrzandvoort1.zipb.kpn.net
gst.pmr.kpn.net
gouda0-asd.cust.kpn.net
diensten.monitoring.kpn.net
clht.pmr.kpn.net
www.kpn.net
plht.pmr.kpn.net
*.pmr.kpn.net
www.kpn.net
pst.pmr.kpn.net
vpnaccess.oam.kpn.net
wopa.kpn.net
citrixportal.oam.kpn.net
www.kpn.net
test.diensten.monitoring.kpn.net
www.kpn.net
groningen1-rt.cust.kpn.net
vlissingen1.kpn.net
vpnaccess.oam.kpn.net
diensten.monitoring.kpn.net
tenrtexel1.zipb.kpn.net
texel1.zipb.kpn.net
test.diensten.monitoring.kpn.net
tenrzandvoort1.kpn.net
vlissingen1.kpn.net
avds.monitoring.kpn.net
zierikzee1.zipb.kpn.net
groningen1-asd.cust.kpn.net
cri.pmr.kpn.net
sntpf.pmr.kpn.net
wopa.kpn.net
texel1.zipb.kpn.net
*.pem.kpn.net
citrixportal.mobidata.kpn.net

Certificate

The complete raw certificate details for wopa.kpn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV9pQVpuaH1Hn4v5K4Ks
jxpviC18SRIox2HAl8NX2p4yzSI7UnCCQqI2LONQZ7M3iQMYXRkCwxGljm2hwgBn
t4/uf3PzW+aKkObHY9bDdu2FWZmlDQeLOd1TgiZCFxG3XXxPH/ZHrYMqgMi7EuAD
F3AYW0vIC2nDKTVEiYAnaXJqJcsMAr6ITNiEyGBJ58rfUbFCW65Ky7yjF9rg08pE
HqXqM7UWzEM54D8sIZssICn5MGak3aKYDBP1+OsIbYydoWodvddS/4YOXkIWl4pc
KThkirahmIZ2OmYpEwr3n/LFVb5jPRBxObAk5Zc2rjKl2EeOmo3a+vta9IGduNn3
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7215379557959451199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN PKIoverheid EV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-23 12:30:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 12:30:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koninklijke KPN N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02045200'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wopa.kpn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22896182192168428351644733076638178644602461190951734101581060714714746194411282292905937468741118096919945820786288387385577939657687477208042236114890088086825930995053449382212107200360327441518394341305711709948427101619980414347424808620446285069223225357361308411396999988323595141775847029173095819967935185156372644656866579308714038504672703402711778293738588386760285489740833941028098595504878683705589551629138229254927248336043625991600713204579656023309263656251968162340527202135588835835227483975875887363146099686638784461366614070033750683172047669988464005515478173165617863828442793133230268217161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNPKIoverheidEVCA.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://evocsp1.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							543c1c2559a4fe49f2103e90237538f659b7c023
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 800385b0a76392df1c7f5f28f25d9d1ceebb4c08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/elektronische-opslagplaats'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het EV CPS PKIoverheid van KPN van toepassing. The KPN Extended Validation PKIoverheid CPS applies to this certificate.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://evcrl1.managedpki.com/KPNPKIoverheidEVCA/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wopa.kpn.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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