acc-mijn.ssr.nl

Issued by KPN Corporate Market CSP Justitie CA - G2

About this certificate


This digital certificate with serial number 2e:d2:00:b0:e3:8e:8e:d7:3f:2f:79:ed:e3:4f:57:19 was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate contains a key usage different from ClientAuth or EmailProtection
  • ERROR: Certificate has key usage [KeyAgreement] set

Ministerie van Veiligheid en Justitie

Company registration number: 00000004000000076000
Organization: Ministerie van Veiligheid en Justitie
Organization unit: de Rechtspraak
State / Province: Zuid-Holland
Locality: Den Haag
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Zuid-Holland
Locality: Den Haag
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:d2:00:b0:e3:8e:8e:d7:3f:2f:79:ed:e3:4f:57:19
Serial Number (int): 62234884160980485708564088557197547289
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ab:bb:0a:04:75:69:6a:d9:87:e1:94:44:67:35:25:31:89:09:33:e9
AuthorityKeyId: a2:ad:23:c1:56:e6:26:e1:c7:9e:a9:bc:ea:96:6c:c5:75:ae:cc:bd

Fingerprint (sha1): dd:af:c3:d9:ef:da:da:ba:6c:9a:92:8b:f4:b3:ec:42:74:42:09:18
Fingerprint (sha256): 38:a2:89:a6:23:38:88:30:7c:c4:d7:44:f0:e3:81:63:a6:dc:6d:06:02:2e:09:02:c2:4a:ec:ce:b6:dc:5b:05


Revocation information

OCSP Server: http://ocsp1.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCMCSPJustitieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on acc-mijn.ssr.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication
Email Protection

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: acc-mijn.ssr.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGhzCCBG+gAwIBAgIQLtIAsOOOjtc/L3nt409XGTANBgkqhkiG9w0BAQsFADBj MQswCQYDVQQGEwJOTDEgMB4GA1UEChMXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx MjAwBgNVBAMTKUtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBKdXN0aXRpZSBDQSAt IEcyMB4XDTE1MDIxMjAwMDAwMFoXDTE4MDIxMjIzNTk1OVowgbkxCzAJBgNVBAYT Ak5MMRUwEwYDVQQIDAxadWlkLUhvbGxhbmQxETAPBgNVBAcMCERlbiBIYWFnMS4w LAYDVQQKDCVNaW5pc3RlcmllIHZhbiBWZWlsaWdoZWlkIGVuIEp1c3RpdGllMRcw FQYDVQQLDA5kZSBSZWNodHNwcmFhazEdMBsGA1UEBRMUMDAwMDAwMDQwMDAwMDAw NzYwMDAxGDAWBgNVBAMMD2FjYy1taWpuLnNzci5ubDCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALR1Q6ykf2DzxD+uVcsbZOb26d4EiF9621qprGkk3N0W y416esAyJYHVHcl8L7qzstYEd5Ej02jypGeH3fHKSzPiOX4Qcog4mWHnOgdKILH5 4BTDWacNC97ADYF6PD1jkDR/P5/uTeSzkjIxiSxHRABxikNVqKyxS28A3YIjuIY7 97M98KtLc5UACNTKwcGj8WHe5uZfMvBv53dPOennb1+UoqO3oCb2NccjteYnNt+t ahxBi8v7dhE/j8QSBKhLieBBT4T5uRYYpkIfIGauHOSofHW+sd0LfhhAezrsIv2W dv0DFgZk8DyuOuj8SRebiaVxgZ+KPddwRh8tXMG2nqkCAwEAAaOCAd4wggHaMAwG A1UdEwEB/wQCMAAwUgYDVR0fBEswSTBHoEWgQ4ZBaHR0cDovL2NlcnQubWFuYWdl ZHBraS5jb20vY3JsL0tQTkNNQ1NQSnVzdGl0aWVDQUcyL0xhdGVzdENSTC5jcmww DgYDVR0PAQH/BAQDAgOoMB0GA1UdDgQWBBSruwoEdWlq2YfhlERnNSUxiQkz6TAf BgNVHSMEGDAWgBSirSPBVuYm4ceeqbzqlmzFda7MvTAaBgNVHREEEzARgg9hY2Mt bWlqbi5zc3IubmwwJwYDVR0lBCAwHgYIKwYBBQUHAwIGCCsGAQUFBwMBBggrBgEF BQcDBDCBpwYDVR0gBIGfMIGcMIGZBgpghBABh2sBAgUGMIGKMDcGCCsGAQUFBwIB FitodHRwczovL2NlcnRpZmljYWF0Lmtwbi5jb20vcGtpb3ZlcmhlaWQvY3BzME8G CCsGAQUFBwICMEMaQU9wIGRpdCBjZXJ0aWZpY2FhdCBpcyBoZXQgQ1BTIFBLSW92 ZXJoZWlkIHZhbiBLUE4gdmFuIHRvZXBhc3NpbmcuMDcGCCsGAQUFBwEBBCswKTAn BggrBgEFBQcwAYYbaHR0cDovL29jc3AxLm1hbmFnZWRwa2kuY29tMA0GCSqGSIb3 DQEBCwUAA4ICAQBmAiFlxhMZQ8lCiGTQXi1AgCNXaAqi6kbmquH1/OT6EGjQ4H5P RXhmj1hrK0RlccJPf4SBGUW6OTG61sJ2XYTycBXnl5uS2JS796dfJUH+xKKmEDed to85abwsJCyAVt6lcbWzFOUK2/Hiw4dB+GrW/a135agYWz7UwBF9Q1wINXR8c4Pl 59uB3TtJgkUBB932R3IXJ0VWa5BGi9KRjSg6L1qPuav2SkW3JnOFeBXFRupMThak 9m5UBiZ0LZoNbjS0hk9VCMKpDna6nBl2UqyZSsoMMgckexRCPELTPhXLXT7fOkwH UMp+UMu6MRfRbDX9XKBobixysMWxykYeeLC48qnU9jWrGP2YCMkr8KEy1IRYnpss Dg+PyxEn9gdZPx7bZjiNx4kByeA52Id1pOMBoYBqU6aLGs1rbXEgg8YVdF4mc31g CzcVb+z390tea7fLiXXAzLtKs1vd5WWwSQTdkoaezhXbbYBh1QeVL/UVES9pm+/X bYEPFAnUVmPd7A2N3XCA00NqcFvXBXyiPCoSLcw2f9uhrlKuT4AMPdK/CSgfbYtg oSbCbGBfmyrYzoOq+Q6uLNFqKNrxti1lHPN/hZcw8taKgLum20N0tuHoj+voLnB1 yXdc1iIIacKhz0apIXfjBYzPVJtazmXnKYfJ75fQo9TxChbln2WUhejKpg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHVDrKR/YPPEP65Vyxtk 5vbp3gSIX3rbWqmsaSTc3RbLjXp6wDIlgdUdyXwvurOy1gR3kSPTaPKkZ4fd8cpL M+I5fhByiDiZYec6B0ogsfngFMNZpw0L3sANgXo8PWOQNH8/n+5N5LOSMjGJLEdE AHGKQ1WorLFLbwDdgiO4hjv3sz3wq0tzlQAI1MrBwaPxYd7m5l8y8G/nd0856edv X5Sio7egJvY1xyO15ic2361qHEGLy/t2ET+PxBIEqEuJ4EFPhPm5FhimQh8gZq4c 5Kh8db6x3Qt+GEB7Ouwi/ZZ2/QMWBmTwPK466PxJF5uJpXGBn4o913BGHy1cwbae qQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 62234884160980485708564088557197547289 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPN Corporate Market CSP Justitie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Den Haag' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ministerie van Veiligheid en Justitie' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'de Rechtspraak' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000004000000076000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'acc-mijn.ssr.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22780720101562666133867489089939906010051641746418850643492627977473966789278105952216647205072874369620512713624393596436419843197179659016390734722621510920053407771188751034086049334636992721217703953432816349279502007141431085096652447814063497900206048789085338468020661861547498102355318944608287192084739152638181737343001800251148705552351413633248789999251100608305479886054598931260201095829816062019569226909900417283291259611194268469791620280370752216227777491718137951666328303347528842014828712964023387113307987855308111608752960975641660258156297716524009632489506655880618634674118796987732237655721 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCMCSPJustitieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) abbb0a0475696ad987e1944467352531890933e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a2ad23c156e626e1c79ea9bcea966cc575aeccbd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-mijn.ssr.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0066022165c6131943c9428864d05e2d40802357680aa2ea46e6aae1f5fce4fa1068d0e07e4f4578668f586b2b446571c24f7f84811945ba3931bad6c2765d84f27015e7979b92d894bbf7a75f2541fec4a2a610379db68f3969bc2c242c8056dea571b5b314e50adbf1e2c38741f86ad6fdad77e5a8185b3ed4c0117d435c0835747c7383e5e7db81dd3b4982450107ddf64772172745566b90468bd2918d283a2f5a8fb9abf64a45b72673857815c546ea4c4e16a4f66e540626742d9a0d6e34b4864f5508c2a90e76ba9c197652ac994aca0c3207247b14423c42d33e15cb5d3edf3a4c0750ca7e50cbba3117d16c35fd5ca0686e2c72b0c5b1ca461e78b0b8f2a9d4f635ab18fd9808c92bf0a132d484589e9b2c0e0f8fcb1127f607593f1edb66388dc78901c9e039d88775a4e301a1806a53a68b1acd6b6d712083c615745e26737d600b37156fecf7f74b5e6bb7cb8975c0ccbb4ab35bdde565b04904dd92869ece15db6d8061d507952ff515112f699befd76d810f1409d45663ddec0d8ddd7080d3436a705bd7057ca23c2a122dcc367fdba1ae52ae4f800c3dd2bf09281f6d8b60a126c26c605f9b2ad8ce83aaf90eae2cd16a28daf1b62d651cf37f859730f2d68a80bba6db4374b6e1e88febe82e7075c9775cd6220869c2a1cf46a92177e3058ccf549b5ace65e72987c9ef97d0a3d4f10a16e59f659485e8caa6