b2.platformrijksoverheid.nl

- Rijksoverheid -

Issued by QuoVadis PKIoverheid Server CA 2020

About this certificate

This digital certificate with serial number 7a:6f:fe:1f:bb:e4:8d:ae:ad:2e:02:2a:99:fa:52:1f:46:2f:c4:d6 was issued on by QuoVadis Trustlink B.V..

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Rijksoverheid

Organization: Rijksoverheid
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:6f:fe:1f:bb:e4:8d:ae:ad:2e:02:2a:99:fa:52:1f:46:2f:c4:d6
Serial Number (int): 698994394076677715331470756471931917230276592854
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 6b:ae:96:a6:4c:a7:48:90:cc:f5:53:d3:90:d4:c6:61:e6:07:f1:55
AuthorityKeyId: 22:b7:3d:c0:4e:66:6f:58:a8:73:b0:12:df:ff:bb:d3:8e:13:98:e7

Fingerprint (sha1): 9c:29:43:91:91:71:98:e0:6e:2b:9c:63:a0:5a:ab:68:9e:45:1b:bf
Fingerprint (sha256): a3:39:f2:da:28:3c:f1:66:92:6e:1c:e3:ed:f0:00:90:e9:8c:4b:7f:27:4d:07:1d:94:d3:de:c1:74:20:f4:10

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl

Check the revocation status for certificate b2.platformrijksoverheid.nl

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b2.platformrijksoverheid.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b2.platformrijksoverheid.nl
gobiernodireino.nl
www.gobiernodireino.nl
feeds.gobiernodireino.nl
opendata.gobiernodireino.nl
gobiernudireino.nl
www.gobiernudireino.nl
feeds.gobiernudireino.nl
opendata.gobiernudireino.nl
aivd.nl
www.aivd.nl
feeds.aivd.nl
opendata.aivd.nl
english.aivd.nl
feeds.english.aivd.nl
opendata.english.aivd.nl
wnra.nl
www.wnra.nl
feeds.wnra.nl
opendata.wnra.nl
wegwijsmetjehuurprijs.nl
www.wegwijsmetjehuurprijs.nl
feeds.wegwijsmetjehuurprijs.nl
opendata.wegwijsmetjehuurprijs.nl
magazines.logius.nl
koopoverheid.nl
www.koopoverheid.nl
feeds.koopoverheid.nl
opendata.koopoverheid.nl
rijksdienstcn.com
www.rijksdienstcn.com
feeds.rijksdienstcn.com
opendata.rijksdienstcn.com
english.rijksdienstcn.com
feeds.english.rijksdienstcn.com
opendata.english.rijksdienstcn.com
papiamentu.rijksdienstcn.com
feeds.papiamentu.rijksdienstcn.com
opendata.papiamentu.rijksdienstcn.com
raadopenbaarbestuur.nl
www.raadopenbaarbestuur.nl
feeds.raadopenbaarbestuur.nl
opendata.raadopenbaarbestuur.nl
magazines.woningmarktbeleid.nl
laamagazine.nl
www.laamagazine.nl
it-academieoverheid.nl
www.it-academieoverheid.nl
feeds.it-academieoverheid.nl
opendata.it-academieoverheid.nl
woningmarktbeleid.nl
www.woningmarktbeleid.nl
feeds.woningmarktbeleid.nl
opendata.woningmarktbeleid.nl
covm.nl
www.covm.nl
feeds.covm.nl
opendata.covm.nl
realaboutrent.nl
www.realaboutrent.nl
feeds.realaboutrent.nl
opendata.realaboutrent.nl
fmhaaglanden.nl
www.fmhaaglanden.nl
feeds.fmhaaglanden.nl
opendata.fmhaaglanden.nl
overheidvannu.nl
www.overheidvannu.nl
feeds.overheidvannu.nl
opendata.overheidvannu.nl
kijkenoverdegrens.nl
www.kijkenoverdegrens.nl
feeds.kijkenoverdegrens.nl
opendata.kijkenoverdegrens.nl

Other certificates including the domain name platformrijksoverheid.nl

(limited to 100 certificates)
platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
opendata.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
onderzoek.rijksoverheid.nl
h1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
webanalyse.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
survey-collect.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
toegang.platformrijksoverheid.nl
a-toegang.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
performance.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
a-api.a-subscribe.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
survey.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
survey-cache.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
artifactory.rijksoverheid.nl
a-cms.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
vpn.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
c-cms.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
ps1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
api.subscribe.platformrijksoverheid.nl
cms.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
platformrijksoverheid.nl

Certificate

The complete raw certificate details for b2.platformrijksoverheid.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc9F/MuUUUDEGsTz3a/K
yClZreQBXBHeVLJXTEynHq6ONrZNTfZaVVTaBGkzh6K87F1v78ZYzMB4Cr1U0MQP
Z0drOmG0fZlyljqlXEXuqjzeeYXbU11l99CVtkrS1eldGNqnqXEPfeMjP57qfqlr
Kf4X9dqG7nfqDeCgUNAn5HFr8MsO43Mm0gpW3EYKqrpbRhASsA5JpSbsM7tk5frf
Uo6It7VeHs+cB5Sr2Ym3PNMg2yaW4+29g/dt3kW6LpkwYl693Y7Fw/r+GXJ32Ai+
rHNvaVFs6v1YTdAKXUfSWFlyCf23Rr30n4HfSQh7eewt7/7HoofpzAi8cg/6SHj0
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 698994394076677715331470756471931917230276592854
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Server CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 17:11:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-27 17:21:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksoverheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'b2.platformrijksoverheid.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22951343516205532593445988506570013201865842817505338656038291194505737935058950893851175206621988956755199545013165688896649809684491299789613689006986296861495713649986323902476266973671564135283079134744417762499343697533138878222819718091675087354962269379440822337212620405215152587089970957405395794860681667266830583088389841336297648750310503927109227484619088876542888390553084761405550048542661896102675944745901397822347111568195149618939458464534259168007262208743225331106206173584025312465027768191720379807902491190946017829695105976709598756666331335272427725687668811946657954115690740682117768344719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22b73dc04e666f58a873b012dfffbbd38e1398e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1770 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiernodireino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobiernodireino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.gobiernodireino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.gobiernodireino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiernudireino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobiernudireino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.gobiernudireino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.gobiernudireino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.aivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.aivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.aivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.english.aivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.english.aivd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnra.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnra.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.wnra.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.wnra.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wegwijsmetjehuurprijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wegwijsmetjehuurprijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.wegwijsmetjehuurprijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.wegwijsmetjehuurprijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.logius.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koopoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koopoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.koopoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.koopoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.english.rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.english.rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papiamentu.rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.papiamentu.rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.papiamentu.rijksdienstcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raadopenbaarbestuur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raadopenbaarbestuur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.raadopenbaarbestuur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.raadopenbaarbestuur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.woningmarktbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laamagazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laamagazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-academieoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it-academieoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.it-academieoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.it-academieoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woningmarktbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woningmarktbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.woningmarktbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.woningmarktbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.covm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.covm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realaboutrent.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realaboutrent.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.realaboutrent.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.realaboutrent.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmhaaglanden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmhaaglanden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.fmhaaglanden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.fmhaaglanden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overheidvannu.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overheidvannu.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.overheidvannu.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.overheidvannu.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kijkenoverdegrens.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kijkenoverdegrens.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.kijkenoverdegrens.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.kijkenoverdegrens.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 82 0 101 0 108 0 105 0 97 0 110 0 99 0 101 0 32 0 111 0 110 0 32 0 116 0 104 0 105 0 115 0 32 0 99 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 98 0 121 0 32 0 97 0 110 0 121 0 32 0 112 0 97 0 114 0 116 0 121 0 32 0 97 0 115 0 115 0 117 0 109 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 114 0 101 0 108 0 101 0 118 0 97 0 110 0 116 0 32 0 81 0 117 0 111 0 86 0 97 0 100 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 105 0 111 0 110 0 32 0 80 0 114 0 97 0 99 0 116 0 105 0 99 0 101 0 32 0 83 0 116 0 97 0 116 0 101 0 109 0 101 0 110 0 116 0 32 0 97 0 110 0 100 0 32 0 111 0 116 0 104 0 101 0 114 0 32 0 100 0 111 0 99 0 117 0 109 0 101 0 110 0 116 0 115 0 32 0 105 0 110 0 32 0 116 0 104 0 101 0 32 0 81 0 117 0 111 0 86 0 97 0 100 0 105 0 115 0 32 0 114 0 101 0 112 0 111 0 115 0 105 0 116 0 111 0 114 0 121 0 46]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bae96a64ca74890ccf553d390d4c661e607f155
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017430f08adc0000040300483046022100b13d9ae9c2e5ca758c2e09c9b2cb998828ba888688e662fc7585f76edbb0c20d022100b004bbca086d7fb60442416e5441141c2fd1bb391e7be5b596e60b567f425c5b0077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017430f08b390000040300483046022100b2938d3b21c9cc02fbac1abffd03ade6367cd5da95ca8efeed45d71bba085e040221009405c7c130607a6f5e6d874310f07653774de5e6e7c4d0888740a4947c008894
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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