autodiscover.irvn.nl

- Modulaire Gemeenschappelijke regeling Rijk van Nijmegen -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number de:10:54:03:4f:81:aa:82:12:08:b6:82:ff:54:0b:10 was issued on by Sectigo Limited.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Modulaire Gemeenschappelijke regeling Rijk van Nijmegen

Organization: Modulaire Gemeenschappelijke regeling Rijk van Nijmegen
Organization unit: Functioneel Beheer
State / Province: Gelderland
Locality: Nijmegen
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): de:10:54:03:4f:81:aa:82:12:08:b6:82:ff:54:0b:10
Serial Number (int): 295173395798685147718105133854208822032
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2a:a4:61:57:80:10:82:43:f7:d5:cf:8f:f6:1a:25:e1:97:3d:20:ad
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): d3:ba:1e:eb:58:40:26:8a:d7:8a:05:93:6c:62:62:a8:54:e1:d4:cd
Fingerprint (sha256): a9:3e:f2:be:a4:9b:a0:72:d5:01:98:1f:76:6d:11:96:83:33:df:2d:3e:c2:0b:ab:55:9f:c7:58:c6:fc:65:08

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate autodiscover.irvn.nl

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for autodiscover.irvn.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.irvn.nl
autodiscover.50pluspartij.nijmegen.nl
autodiscover.bergendal.nl
autodiscover.beuningen.nl
autodiscover.cda.mookenmiddelaar.nl
autodiscover.cda.nijmegen.nl
autodiscover.d66.nijmegen.nl
autodiscover.denijmeegsefractie.nijmegen.nl
autodiscover.dgp.mookenmiddelaar.nl
autodiscover.doejemee-rvn.nl
autodiscover.druten.nl
autodiscover.drutenwijchen.nl
autodiscover.gemwaalsprong.nijmegen.nl
autodiscover.gewoonnijmegen.nijmegen.nl
autodiscover.ggibnijmegen.nl
autodiscover.groenlinks.mookenmiddelaar.nl
autodiscover.groenlinks.nijmegen.nl
autodiscover.heumen.nl
autodiscover.liberaal.nijmegen.nl
autodiscover.mookenmiddelaar.nl
autodiscover.munitax.nl
autodiscover.natuurlijkgroen.mookenmiddelaar.nl
autodiscover.nijmegen.nl
autodiscover.nijmegennu.nijmegen.nl
autodiscover.odrn.nl
autodiscover.partijvoordedieren.nijmegen.nl
autodiscover.projectbureauglz.nl
autodiscover.pvda.mookenmiddelaar.nl
autodiscover.pvda.nijmegen.nl
autodiscover.raadwijchen.nl
autodiscover.regiorvn.nl
autodiscover.sociaalwijkteamwijchen.nl
autodiscover.sp.nijmegen.nl
autodiscover.sportbedrijfbergendal.nl
autodiscover.stadspartijdnf.nijmegen.nl
autodiscover.vvd.mookenmiddelaar.nl
autodiscover.vvd.nijmegen.nl
autodiscover.wbrn.nl
autodiscover.wijchen.nl
autodiscover.wijzijngroengezondeninbewegingnijmegen.nl
autodiscover.zwembadgroesbeek.nl
hybrid.irvn.nl
imap.irvn.nl
imap.nijmegen.nl
smtp01.irvn.nl
smtp02.irvn.nl
webmail.irvn.nl

Other certificates including the domain name irvn.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for autodiscover.irvn.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM4zCCC8ugAwIBAgIRAN4QVANPgaqCEgi2gv9UCxAwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMTEyMDgwMDAwMDBaFw0yMzAxMDgyMzU5NTlaMIGzMQswCQYD
VQQGEwJOTDETMBEGA1UECBMKR2VsZGVybGFuZDERMA8GA1UEBxMITmlqbWVnZW4x
QDA+BgNVBAoTN01vZHVsYWlyZSBHZW1lZW5zY2hhcHBlbGlqa2UgcmVnZWxpbmcg
UmlqayB2YW4gTmlqbWVnZW4xGzAZBgNVBAsTEkZ1bmN0aW9uZWVsIEJlaGVlcjEd
MBsGA1UEAxMUYXV0b2Rpc2NvdmVyLmlydm4ubmwwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0m7Uli0/hZvFsjaSKaSOiZI1XjuKS4VZc0UvCKtPntnli
jNMgQvZedJDqD+peO7HDVcZsfcZoBiEIHbg2EuzLwknA+YJ9F8XevVs8Gi8x0Ry+
S1aSTeGlZtYQYj3rQm2bVVKv1pJK2TIx6NSX8BpwIAe24JggYn4gxRftRcwFMjRs
Ul3Y+JlKnOExSGGwXv7nwfqul7cIVVUg+WZOR907Jn5ZQOHvvGnBSqQfQbAPnt6o
BiSQZy/vBjAMFF6d14lIYW3G9K5DN6t6t+NHHDZPlE67Re5UjTHkurQXz/7SgLa8
OeTxGOe2g5sfn0CFYc6bgcsB4PprsSlszq+p42C/AgMBAAGjggkMMIIJCDAfBgNV
HSMEGDAWgBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAdBgNVHQ4EFgQUKqRhV4AQgkP3
1c+P9hol4Zc9IK0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQEC
AQMEMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeB
DAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLnNlY3RpZ28uY29tL1Nl
Y3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3Js
MIGKBggrBgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGln
by5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2
ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIIB
fgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCt9776fP8QyIudPZwePhhqtGcpXc+x
DCTKhYY069yCigAAAX2ZvBJ5AAAEAwBHMEUCIQDzGdKLMDebz62k2kzi+vqZNFBO
iHgY5BwwDS3cV+Jw6QIgPB4/qnhiMIRf8NpTrq2/6UuXs41ADoMYx+1y1pJ1ma4A
dQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAX2ZvBJLAAAEAwBG
MEQCIAEzSiBVssie6FoDTETp5YjZwMXO+BnclidMoK5Do2ACAiA0h1XVuvfUprc5
2ekRePM1L3LZLzyqdLLj85W/m6AVegB3AOg+0No+9QY1MudXKLyJa8kD08vREWvs
62nhd31tBr1uAAABfZm8EiIAAAQDAEgwRgIhAK8ao3mHNCpfi+mn+dvxLL1OsFwx
pooXk//J35jf9PonAiEAhZPYe/RmS+RQHmq+d/58N48PDqBSTe5o3j0gqC/8p/kw
ggXQBgNVHREEggXHMIIFw4IUYXV0b2Rpc2NvdmVyLmlydm4ubmyCJWF1dG9kaXNj
b3Zlci41MHBsdXNwYXJ0aWoubmlqbWVnZW4ubmyCGWF1dG9kaXNjb3Zlci5iZXJn
ZW5kYWwubmyCGWF1dG9kaXNjb3Zlci5iZXVuaW5nZW4ubmyCI2F1dG9kaXNjb3Zl
ci5jZGEubW9va2VubWlkZGVsYWFyLm5sghxhdXRvZGlzY292ZXIuY2RhLm5pam1l
Z2VuLm5sghxhdXRvZGlzY292ZXIuZDY2Lm5pam1lZ2VuLm5sgithdXRvZGlzY292
ZXIuZGVuaWptZWVnc2VmcmFjdGllLm5pam1lZ2VuLm5sgiNhdXRvZGlzY292ZXIu
ZGdwLm1vb2tlbm1pZGRlbGFhci5ubIIcYXV0b2Rpc2NvdmVyLmRvZWplbWVlLXJ2
bi5ubIIWYXV0b2Rpc2NvdmVyLmRydXRlbi5ubIIdYXV0b2Rpc2NvdmVyLmRydXRl
bndpamNoZW4ubmyCJmF1dG9kaXNjb3Zlci5nZW13YWFsc3Byb25nLm5pam1lZ2Vu
Lm5sgidhdXRvZGlzY292ZXIuZ2V3b29ubmlqbWVnZW4ubmlqbWVnZW4ubmyCHGF1
dG9kaXNjb3Zlci5nZ2libmlqbWVnZW4ubmyCKmF1dG9kaXNjb3Zlci5ncm9lbmxp
bmtzLm1vb2tlbm1pZGRlbGFhci5ubIIjYXV0b2Rpc2NvdmVyLmdyb2VubGlua3Mu
bmlqbWVnZW4ubmyCFmF1dG9kaXNjb3Zlci5oZXVtZW4ubmyCIWF1dG9kaXNjb3Zl
ci5saWJlcmFhbC5uaWptZWdlbi5ubIIfYXV0b2Rpc2NvdmVyLm1vb2tlbm1pZGRl
bGFhci5ubIIXYXV0b2Rpc2NvdmVyLm11bml0YXgubmyCL2F1dG9kaXNjb3Zlci5u
YXR1dXJsaWprZ3JvZW4ubW9va2VubWlkZGVsYWFyLm5sghhhdXRvZGlzY292ZXIu
bmlqbWVnZW4ubmyCI2F1dG9kaXNjb3Zlci5uaWptZWdlbm51Lm5pam1lZ2VuLm5s
ghRhdXRvZGlzY292ZXIub2Rybi5ubIIrYXV0b2Rpc2NvdmVyLnBhcnRpanZvb3Jk
ZWRpZXJlbi5uaWptZWdlbi5ubIIgYXV0b2Rpc2NvdmVyLnByb2plY3RidXJlYXVn
bHoubmyCJGF1dG9kaXNjb3Zlci5wdmRhLm1vb2tlbm1pZGRlbGFhci5ubIIdYXV0
b2Rpc2NvdmVyLnB2ZGEubmlqbWVnZW4ubmyCG2F1dG9kaXNjb3Zlci5yYWFkd2lq
Y2hlbi5ubIIYYXV0b2Rpc2NvdmVyLnJlZ2lvcnZuLm5sgiZhdXRvZGlzY292ZXIu
c29jaWFhbHdpamt0ZWFtd2lqY2hlbi5ubIIbYXV0b2Rpc2NvdmVyLnNwLm5pam1l
Z2VuLm5sgiVhdXRvZGlzY292ZXIuc3BvcnRiZWRyaWpmYmVyZ2VuZGFsLm5sgidh
dXRvZGlzY292ZXIuc3RhZHNwYXJ0aWpkbmYubmlqbWVnZW4ubmyCI2F1dG9kaXNj
b3Zlci52dmQubW9va2VubWlkZGVsYWFyLm5sghxhdXRvZGlzY292ZXIudnZkLm5p
am1lZ2VuLm5sghRhdXRvZGlzY292ZXIud2Jybi5ubIIXYXV0b2Rpc2NvdmVyLndp
amNoZW4ubmyCNmF1dG9kaXNjb3Zlci53aWp6aWpuZ3JvZW5nZXpvbmRlbmluYmV3
ZWdpbmduaWptZWdlbi5ubIIgYXV0b2Rpc2NvdmVyLnp3ZW1iYWRncm9lc2JlZWsu
bmyCDmh5YnJpZC5pcnZuLm5sggxpbWFwLmlydm4ubmyCEGltYXAubmlqbWVnZW4u
bmyCDnNtdHAwMS5pcnZuLm5sgg5zbXRwMDIuaXJ2bi5ubIIPd2VibWFpbC5pcnZu
Lm5sMA0GCSqGSIb3DQEBCwUAA4IBAQAINADY11AkFRnUBv5/ItGdBIflMvwIJxI8
iu2TmUYK0NvVIT6hougO/8P/3sbSnqYUlBOkFpTwqF+zu5S8qX/SpAruq0nRYfPl
xgwSH6SkQB8+O4U6QyKwLX1T8I6ZL1T6IerkbPaP4KzEBNTVGZ9G8ZBXL8tnEKne
wxn0eZGBQuZrA5d7/ZWgFchVj5sdko11kB4SYd7eukXN8VaAkSCWkopIno6yoKHq
sMO011ekOQAbbWUZc+CsApqzqWfWxrj5uiEenlHo1bWKz6WONghkXCtkzskRHNLO
pTaM/h8mqXhu6Jv5tkQ7WUeH3Xf9WWUnv8r4WbhBGapN7vJJLJZT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJu1JYtP4WbxbI2kimkj
omSNV47ikuFWXNFLwirT57Z5YozTIEL2XnSQ6g/qXjuxw1XGbH3GaAYhCB24NhLs
y8JJwPmCfRfF3r1bPBovMdEcvktWkk3hpWbWEGI960Jtm1VSr9aSStkyMejUl/Aa
cCAHtuCYIGJ+IMUX7UXMBTI0bFJd2PiZSpzhMUhhsF7+58H6rpe3CFVVIPlmTkfd
OyZ+WUDh77xpwUqkH0GwD57eqAYkkGcv7wYwDBRendeJSGFtxvSuQzererfjRxw2
T5ROu0XuVI0x5Lq0F8/+0oC2vDnk8RjntoObH59AhWHOm4HLAeD6a7EpbM6vqeNg
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295173395798685147718105133854208822032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nijmegen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Modulaire Gemeenschappelijke regeling Rijk van Nijmegen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Functioneel Beheer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autodiscover.irvn.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22799677175201297230808419386476302921957867388457186209496860784656135860947597773475622258058057903781477698066507455261200758644769805151588364835336160751770909432251391646908332662143645848348347552223414382423929879123789330153634652888198600574758206212857325457091517668016869399648154403557974762743139001927168460158032240962348305043435866188127204685870079791293828445907441912539540559986468571786519410800788518057447542448842864741904018183464653866355581962711438693659491208746217902949299405539494742839082595629986065706260305289930768138918443541647122053966222555756277985338211377959124613685439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2aa4615780108243f7d5cf8ff61a25e1973d20ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1479 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.50pluspartij.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bergendal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.beuningen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cda.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cda.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.d66.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.denijmeegsefractie.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dgp.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.doejemee-rvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.druten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drutenwijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gemwaalsprong.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gewoonnijmegen.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ggibnijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.groenlinks.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.groenlinks.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.heumen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.liberaal.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.munitax.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.natuurlijkgroen.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nijmegennu.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.odrn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.partijvoordedieren.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.projectbureauglz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pvda.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pvda.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.raadwijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.regiorvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sociaalwijkteamwijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sp.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sportbedrijfbergendal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stadspartijdnf.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vvd.mookenmiddelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vvd.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wbrn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wijchen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wijzijngroengezondeninbewegingnijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zwembadgroesbeek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.nijmegen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp01.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp02.irvn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.irvn.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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