online.atbank.nl

- Amsterdam Trade Bank N.V. -

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 3c:9f:0c:e6:00:c6:79:4d:d0:4b:0b:34 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Amsterdam Trade Bank N.V.

Company registration number: 33260432
Organization: Amsterdam Trade Bank N.V.
Address: Herengracht 469/475
State / Province: NH
Locality: Amsterdam
Country: NL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:9f:0c:e6:00:c6:79:4d:d0:4b:0b:34
Serial Number (int): 18761380705804226971707312948
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: de:99:1f:51:e7:ee:ac:41:87:ad:c4:10:6b:6a:d5:64:a0:d2:25:31
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): 29:bd:87:b6:37:9c:05:f5:0c:ed:71:1b:08:6f:2f:d7:4d:85:57:e0
Fingerprint (sha256): c5:ae:1e:f0:fd:49:fe:a6:93:7c:02:1f:56:2d:3c:8c:63:eb:f3:97:d0:fa:14:4e:a6:9a:99:62:63:9d:b7:4c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for certificate online.atbank.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for online.atbank.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online.atbank.nl

Other certificates including the domain name atbank.nl

(limited to 100 certificates)
online.atbank.nl
www.atbank.nl
*.test.atbank.nl
online.atbank.nl
*.atbank.nl
webra.atbank.nl
sts.atbank.nl
fibr.com
atbconnect.atbank.nl
*.atbank.nl
mobile.atbank.nl
fibr.com
*.test.atbank.nl
transfer.atbank.nl
mobile.atbank.nl
portal.atbank.nl
*.test.atbank.nl
transfer.atbank.nl
bdrc.acc.atbank.nl
www.atbank.nl
mdm.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
transfer.atbank.nl
mdm.atbank.nl
*.atbank.nl
online.atbank.nl
mobile.atbank.nl
*.atbank.nl
www.atbank.nl
portal.atbank.nl
www.atbank.nl
fibr.com
remote.atbank.nl
*.test.atbank.nl
webra.atbank.nl
sts.atbank.nl
online.atbank.nl
fibr.com
bdrc.atbank.nl
online.atbank.nl
online.atbank.nl
transfer.atbank.nl
*.acc.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
*.atbank.nl
mail10.atbank.nl
portal.atbank.nl
www.atbank.nl
*.acc.atbank.nl
mobile.atbank.nl
transfer.atbank.nl
*.atbank.nl
atbconnect.atbank.nl

Certificate

The complete raw certificate details for online.atbank.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHBTCCBe2gAwIBAgIMPJ8M5gDGeU3QSws0MA0GCSqGSIb3DQEBCwUAMGIxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTgwNgYDVQQDEy9H
bG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMjAe
Fw0xNTAyMjgxMDI3MDJaFw0xNjA0MjgxMzAwMDNaMIHSMR0wGwYDVQQPDBRQcml2
YXRlIE9yZ2FuaXphdGlvbjERMA8GA1UEBRMIMzMyNjA0MzIxEzARBgsrBgEEAYI3
PAIBAxMCTkwxCzAJBgNVBAYTAk5MMQswCQYDVQQIEwJOSDESMBAGA1UEBxMJQW1z
dGVyZGFtMRwwGgYDVQQJExNIZXJlbmdyYWNodCA0NjkvNDc1MSIwIAYDVQQKExlB
bXN0ZXJkYW0gVHJhZGUgQmFuayBOLlYuMRkwFwYDVQQDExBvbmxpbmUuYXRiYW5r
Lm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS4Hx6xHJ7/ew15O
iyv5J78n4bhoxuf8XgnqVAAOgb985fbgaBMmQlIOe4rTJB96v7lbJRT1qqZ31Tzb
9u1w3TQtEeVHCsVhTPv6p7/osnwT7gILvCGKP/W20/VhdyIl/UApcv8NWlGgjKoy
oknITMY45sUZ0CHW7nOjN4KIK6SgACHjB+N1JXSmKyskxUwTRCGS38TtIdXg2/lK
Q5NRGWRKE1XNdVquCbjTGBPjrHRgPUYlq1fDh9NCeYt9LqZaqBSsIVDiTL5SPaD7
LrdWtU3VU75hkOpzG7ieilvOfwtBqDOc7HbtLXLHBQb5HD++9kuvX94Es2saB2H/
oW44XQIDAQABo4IDSDCCA0QwDgYDVR0PAQH/BAQDAgWgMEwGA1UdIARFMEMwQQYJ
KwYBBAGgMgEBMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24u
Y29tL3JlcG9zaXRvcnkvMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuZ2xv
YmFsc2lnbi5jb20vZ3MvZ3NleHRlbmR2YWxzaGEyZzIuY3JsMIGUBggrBgEFBQcB
AQSBhzCBhDBHBggrBgEFBQcwAoY7aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNv
bS9jYWNlcnQvZ3NleHRlbmR2YWxzaGEyZzJyMi5jcnQwOQYIKwYBBQUHMAGGLWh0
dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc2V4dGVuZHZhbHNoYTJnMjAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwCQYDVR0TBAIwADAbBgNVHREEFDAS
ghBvbmxpbmUuYXRiYW5rLm5sMB0GA1UdDgQWBBTemR9R5+6sQYetxBBratVkoNIl
MTAfBgNVHSMEGDAWgBTaQHdDZRz4/qfj9GSCPk1DEyIxAjCCAX8GCisGAQQB1nkC
BAIEggFvBIIBawFpAHUAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QA
AAFLz7mhGAAABAMARjBEAiBvJ6ZKkfSTLwyLLvWm+alkfaDoYnqW9grLrqdbSLtN
4QIgTzzT7icQ0ZVoLuSFmdjqsPu3h73OYmMYn4a8q0hWapUAdwCkuQmQtBhYFIe7
E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAUvPuasJAAAEAwBIMEYCIQCH8grrbVwX
MR2wVsh1q8e3mihqDG8QZHYJ4GJQG2/RyQIhAPFGb4/orpbIkoPxos5VctFFGfBU
16dsIOr/IteroysZAHcAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0A
AAFLz7m9iQAABAMASDBGAiEAjWLNVhkKitzqO1ij5NKXBIHnEZxOzVr2cPz3OQvD
M5cCIQDdNxv3X2k0A/qNqfZmy1+q8rH47s0wiMJYlQTxliaqcjANBgkqhkiG9w0B
AQsFAAOCAQEABuQMgOiUCUhbXYcsilcbRi+FUL2uGuzjQtAGiyw4L8ar86mKSlri
PEsb0pPvhlXxeT90ED6fMTqB0qbpSz4bm/dT5Qbs00p4z7GDm2W7y+sMinXfo0xg
KROyC2qWPJ4b/pXQvT6unZ8B4WHb3DVibD3HsOA/FkN9NiFhQpMmGNxnUKgtLeA/
VIJpuLkyTLhqe2h/aMMwppgzRM7JkzFvf3QKnMXzjVPRwL+U6d3oB8OP9/sbtWBZ
Cr+wztz6YjyCaZP7TsNERVbe0IeI0OlCaCRf3LJuuB18vuBfo9DBQY+bpPWkqb9b
mm9H9y2J/MYZAEPLHMqr/GAjKBKHEZsN2w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS4Hx6xHJ7/ew15Oiyv5
J78n4bhoxuf8XgnqVAAOgb985fbgaBMmQlIOe4rTJB96v7lbJRT1qqZ31Tzb9u1w
3TQtEeVHCsVhTPv6p7/osnwT7gILvCGKP/W20/VhdyIl/UApcv8NWlGgjKoyoknI
TMY45sUZ0CHW7nOjN4KIK6SgACHjB+N1JXSmKyskxUwTRCGS38TtIdXg2/lKQ5NR
GWRKE1XNdVquCbjTGBPjrHRgPUYlq1fDh9NCeYt9LqZaqBSsIVDiTL5SPaD7LrdW
tU3VU75hkOpzG7ieilvOfwtBqDOc7HbtLXLHBQb5HD++9kuvX94Es2saB2H/oW44
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18761380705804226971707312948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-28 10:27:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-28 13:00:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '33260432'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herengracht 469/475'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam Trade Bank N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'online.atbank.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21356971970810259632376688985990959045330174155351555266067875815529134115220230870864569669479203458096138261072796596111792511288094852495020401579912184658129243140886547305834452446051488571362757343187866399215781959936744545806927666123185164729771915950737922968634545078114896736348420979059023723748326209316082308926894796727014046742388916745242210624298524221855740052831101077373258649128498237858149646465865516495879556896481335527429169691002303389765074199939846771500563393046814547642239339342511673168577290215319804238928926489443560845478585699410902253367885277318920665434052623600422432421981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.atbank.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de991f51e7eeac4187adc4106b6ad564a0d22531
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0006e40c80e89409485b5d872c8a571b462f8550bdae1aece342d0068b2c382fc6abf3a98a4a5ae23c4b1bd293ef8655f1793f74103e9f313a81d2a6e94b3e1b9bf753e506ecd34a78cfb1839b65bbcbeb0c8a75dfa34c602913b20b6a963c9e1bfe95d0bd3eae9d9f01e161dbdc35626c3dc7b0e03f16437d36216142932618dc6750a82d2de03f548269b8b9324cb86a7b687f68c330a6983344cec993316f7f740a9cc5f38d53d1c0bf94e9dde807c38ff7fb1bb560590abfb0cedcfa623c826993fb4ec3444556ded08788d0e94268245fdcb26eb81d7cbee05fa3d0c1418f9ba4f5a4a9bf5b9a6f47f72d89fcc6190043cb1ccaabfc6023281287119b0ddb