www.fwadministraties.nl

- FW administraties -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 20:84:ea:45:e0:10:85:f4 was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FW administraties

Company registration number: 00000003619054880000
Organization: FW administraties
State / Province: Zuid-Holland
Locality: Hendrik-Ido-Ambacht
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 20:84:ea:45:e0:10:85:f4
Serial Number (int): 2343255291972322804
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 96:bd:3d:8b:95:d7:54:fe:0e:ee:f1:6f:93:7e:75:2a:40:a4:92:1a
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): 1a:b5:bb:bd:ba:8e:26:d3:9f:85:32:bc:5a:a9:c0:a6:30:06:d0:be
Fingerprint (sha256): 9b:76:f8:b0:62:18:df:dc:de:fb:78:ab:c8:a3:67:14:f5:69:b2:cb:91:84:f0:21:bc:75:79:b8:2c:9a:cb:8d

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate www.fwadministraties.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fwadministraties.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fwadministraties.nl

Other certificates including the domain name fwadministraties.nl

(limited to 100 certificates)
fwadministraties.nl
fwadministraties.nl
test1.testfirebase.vak0160.com
upisifon.rs
fwadministraties.nl
fwadministraties.nl
app.engagewhiz.com
www.fwadministraties.nl
mijn.fwadministraties.nl
www.leavefacebook.org
aggservices.co.za
appsicologia.nanadevs.com
fwadministraties.nl
mijn.fwadministraties.nl
upisifon.rs
turnos.estudiopws.com
adminsommelier.etoh.app
www.tillhub.ch
www.leavefacebook.org
www.prolimpieza.es
fwadministraties.nl
vld.xyz
www.test2.navn.dev
test1.testfirebase.vak0160.com
fwadministraties.nl
www.developingmagic.com
www.nuovo.co.ke
www.fwadministraties.nl
www.test2.navn.dev
appsicologia.nanadevs.com
fwadministraties.nl
www.developingmagic.com
www.annapoorna.co
www.camaju.com.br
fwadministraties.nl
fwadministraties.nl
fwadministraties.nl
app.engagewhiz.com
sideral.ch
fwadministraties.nl

Certificate

The complete raw certificate details for www.fwadministraties.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIII3zCCBsegAwIBAgIIIITqReAQhfQwDQYJKoZIhvcNAQELBQAwcTELMAkGA1UE
BhMCTkwxETAPBgNVBAoMCEtQTiBCLlYuMRcwFQYDVQRhDA5OVFJOTC0yNzEyNDcw
MTE2MDQGA1UEAwwtS1BOIEJWIFBLSW92ZXJoZWlkIE9yZ2FuaXNhdGllIFNlcnZl
ciBDQSAtIEczMB4XDTE3MTEwMTEwMjAwNFoXDTIwMTAzMTEwMjAwNFowgZ8xCzAJ
BgNVBAYTAk5MMRUwEwYDVQQIDAxadWlkLUhvbGxhbmQxHDAaBgNVBAcME0hlbmRy
aWstSWRvLUFtYmFjaHQxGjAYBgNVBAoMEUZXIGFkbWluaXN0cmF0aWVzMR0wGwYD
VQQFExQwMDAwMDAwMzYxOTA1NDg4MDAwMDEgMB4GA1UEAwwXd3d3LmZ3YWRtaW5p
c3RyYXRpZXMubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Y96R
Ece5fYOO0WAsoz3B54xg/SYNm05hm/veY91JAPOXHhu5rWVu0xK0igrns/aJyVjH
vJZZdAtM7EjbUBH6LsxPt5J3CRYdZuxjH5b0Z92yligW8K+gbX7fDZPmqsI1fpBr
4wP359eF8l1qAYvKEOc5ekusUql12gbJa7UlO9b5JTuHfBTE/2wPrGIXgoAhfkMM
mz0xwrohifH6w6B5cFXEIYbb1zRNAXOpOsKy3fUMCeETCh8qNW3urmSbhbc3Jxwn
6jn1oy4GT6M3c5BsIb8xDYj9W5++lgOgc5ArP3oablXGKn0iLgVPsyv4kRuctSFc
bDgcbzkhaVM/VS/fAgMBAAGjggRKMIIERjCBlAYIKwYBBQUHAQEEgYcwgYQwWAYI
KwYBBQUHMAKGTGh0dHA6Ly9jZXJ0Lm1hbmFnZWRwa2kuY29tL0NBY2VydHMvS1BO
QlZQS0lvdmVyaGVpZE9yZ2FuaXNhdGllU2VydmVyQ0FHMy5jZXIwKAYIKwYBBQUH
MAGGHGh0dHA6Ly9nM29jc3AubWFuYWdlZHBraS5jb20wHQYDVR0OBBYEFJa9PYuV
11T+Du7xb5N+dSpApJIaMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUw5qme150
K4K2xnL9dE6F0pfN/RgwgbEGA1UdIASBqTCBpjCBmQYKYIQQAYdrAQIFBjCBijA3
BggrBgEFBQcCARYraHR0cHM6Ly9jZXJ0aWZpY2FhdC5rcG4uY29tL3BraW92ZXJo
ZWlkL2NwczBPBggrBgEFBQcCAjBDDEFPcCBkaXQgY2VydGlmaWNhYXQgaXMgaGV0
IENQUyBQS0lvdmVyaGVpZCB2YW4gS1BOIHZhbiB0b2VwYXNzaW5nLjAIBgZngQwB
AgIwXgYDVR0fBFcwVTBToFGgT4ZNaHR0cDovL2NybC5tYW5hZ2VkcGtpLmNvbS9L
UE5CVlBLSW92ZXJoZWlkT3JnYW5pc2F0aWVTZXJ2ZXJDQUczL0xhdGVzdENSTC5j
cmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcD
ATAiBgNVHREEGzAZghd3d3cuZndhZG1pbmlzdHJhdGllcy5ubDCCAfYGCisGAQQB
1nkCBAIEggHmBIIB4gHgAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo
/csAAAFfdxhsngAABAMASDBGAiEAlsl1JAifrBpyJ6cmV4FK/oy/6BmMl29xpuxr
pDRM3zcCIQDdyg+KAPdBPOOd9+Ck0QOVeid6EDv4WJBQEKmAWCRhjwB2AFWB1MIW
kDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABX3cYbb8AAAQDAEcwRQIhAI5U
MJRePkuxuUTlNfbUQ4q2jisB9T19QRfS1dwNsbheAiBBC52JwCHRhewfd0OnWmP2
Tf6TVTNoRdIcwRnk2Fdq0QB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaO
HtGFAAABX3cYbosAAAQDAEcwRQIgEAgyjuDDCLD08IUO9Stetd6dUydDgGPiQ5Jj
CIPCXQ4CIQDKSdHOXIGfLondhwOyQm7OyrPX1XIhob0m2FR4IGBjQgB1AKS5CZC0
GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABX3cYbwIAAAQDAEYwRAIgOGzo
bvUryzFLwN/ElFxR/xfrzVe4cFJfvzsxdFAlfJkCIHRJJEe1s26nKDeUEYZimXcn
ZjUOPcbKPmdRGk1mO0muMA0GCSqGSIb3DQEBCwUAA4ICAQB53n2m6FPQh0TYvTk0
+2v0nSR6JGq7TBpPY6+rvfvE68ZcTKZuqXTzcPzSROZT71ODfJ8DkJXB2DFWQWL5
xHLuBd9BpRl0bl96A9wVmjvqt//jo1YsLHM+IUdekT1Oa1AxYRs065cpd6/ysI5Y
Q/CwgF2ztL/joNj3VMBvGndttcBCyMjRUfdBljq6t+eb/NVIPYGG2zswuh0l6SQ7
IOSjuNU+e+FkpKYwS5OeBV5HRg9PUHtZbd09HklD8fI+xg3kGjzS0Bu8laPG5/fP
n5Wzd8IsjItIk9hf8Dn2S5pgD6wuyrCRwcApuBco5/6fRvaDcRpHj2YZQh45Niy2
WPPA2zAqH4dms1K6DuOwMvQgD2ym7ePfzP+2HpwPldK3ab+GqFvNl6rCqMyfP22j
lZkeeqRlg5l84YJDWGj48KbeeulnKgi3QGBtPsMbeIP5n061+wpI3PT5M4U/7LNs
UWmZXDBFlPmNem0P8Fjias+vDxkzjv51Bzx9QKIDZp8pRbdRmX0vDM0qndFdlhn7
bpATTi0n+r4ZT58GWKLQd75TEzpdSVPMJFtgHoCzVcGnJljDj3QXIBGgdPbkzbO9
fZWSliyUWgz1xLxF7NRrdvW8NPo63wwHsQbRtLO1LPieHMFUxgkZSixrCacYXleM
asFo6wZ7tqFeWpLZsaM8IhS2jg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGPekRHHuX2DjtFgLKM9
weeMYP0mDZtOYZv73mPdSQDzlx4bua1lbtMStIoK57P2iclYx7yWWXQLTOxI21AR
+i7MT7eSdwkWHWbsYx+W9GfdspYoFvCvoG1+3w2T5qrCNX6Qa+MD9+fXhfJdagGL
yhDnOXpLrFKpddoGyWu1JTvW+SU7h3wUxP9sD6xiF4KAIX5DDJs9McK6IYnx+sOg
eXBVxCGG29c0TQFzqTrCst31DAnhEwofKjVt7q5km4W3NyccJ+o59aMuBk+jN3OQ
bCG/MQ2I/VufvpYDoHOQKz96Gm5Vxip9Ii4FT7Mr+JEbnLUhXGw4HG85IWlTP1Uv
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2343255291972322804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-01 10:20:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-31 10:20:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hendrik-Ido-Ambacht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FW administraties'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003619054880000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.fwadministraties.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23277095550906521798478122839266547864023001255236172191868518104330785703786921851334824699161094796501828574971713411489449554759584938222218810782686714051808807222069000535351864509847780081401723605481794396240215674778671296350451128395559233115466724203587338386727592434826772617381499009767243565415577050533777343098453576477614518979527464956574628670359799269686084900795910171838836020479266991837063700221851387241313706235996767438110293492781076440644036800243976105644869029476100807712256249829747331931341507926050127415795775293373739505604795273802465568192430121402115932031625027996678867988447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96bd3d8b95d754fe0eeef16f937e752a40a4921a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fwadministraties.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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