loketgezondleven.nl

- Rijksinstituut voor Volksgezondheid en Milieu (RIVM) -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 5e:45:5f:bc:0a:80:92:5e:75:c8:36:58:0f:1b:05:62 was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Rijksinstituut voor Volksgezondheid en Milieu (RIVM)

Organization: Rijksinstituut voor Volksgezondheid en Milieu (RIVM)
State / Province: Utrecht
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 5e:45:5f:bc:0a:80:92:5e:75:c8:36:58:0f:1b:05:62
Serial Number (int): 125307641814078178560823868856330814818
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ee:c5:52:3f:eb:6f:d6:50:c5:05:fc:36:00:0d:37:e2:aa:9f:9f:19
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 01:16:b1:11:41:a1:12:6d:fb:fd:e9:f9:82:e8:e7:14:d7:66:be:1e
Fingerprint (sha256): d4:ab:b7:09:25:d8:64:1e:bb:42:26:14:c7:04:79:a5:a9:c9:c8:ca:19:1e:15:ac:9f:d3:8a:e8:15:15:d3:f6

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate loketgezondleven.nl

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loketgezondleven.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loketgezondleven.nl
interventies.loketgezondleven.nl
www.interventies.loketgezondleven.nl
www.loketgezondleven.nl

Other certificates including the domain name loketgezondleven.nl

(limited to 100 certificates)
drupal.loketgezondleven.nl

www.loketgezondleven.nl
toolkits.loketgezondleven.nl
www.loketgezondleven.nl
toolkits.loketgezondleven.nl

toolkits.loketgezondleven.nl
acceptatie.drupal.loketgezondleven.nl
drupal.loketgezondleven.nl
toolkits.loketgezondleven.nl
acceptatie.drupal.loketgezondleven.nl
toolkits.loketgezondleven.nl
toolkits.loketgezondleven.nl
loketgezondleven.nl
www.loketgezondleven.nl
toolkits.loketgezondleven.nl

www.loketgezondleven.nl
acceptatie.drupal.loketgezondleven.nl
toolkits.loketgezondleven.nl
toolkits.loketgezondleven.nl
www.loketgezondleven.nl
toolkits.loketgezondleven.nl
toolkits.loketgezondleven.nl
test.loketgezondleven.nl
www.loketgezondleven.nl
toolkits.loketgezondleven.nl
acceptatie.drupal.loketgezondleven.nl
drupal.loketgezondleven.nl
acceptatie.drupal.loketgezondleven.nl
toolkits.loketgezondleven.nl

toolkits.loketgezondleven.nl
toolkits.loketgezondleven.nl
toolkits.loketgezondleven.nl
drupal.loketgezondleven.nl
loketgezondleven.nl
www.loketgezondleven.nl
loketgezondleven.nl
toolkits.loketgezondleven.nl
toolkits.loketgezondleven.nl
drupal.loketgezondleven.nl
toolkits.loketgezondleven.nl

Certificate

The complete raw certificate details for loketgezondleven.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH0jCCBbqgAwIBAgIQXkVfvAqAkl51yDZYDxsFYjANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjQwMjI5MDAwMDAwWhcNMjUwMjI4MjM1
OTU5WjB8MQswCQYDVQQGEwJOTDEQMA4GA1UECBMHVXRyZWNodDE9MDsGA1UEChM0
Umlqa3NpbnN0aXR1dXQgdm9vciBWb2xrc2dlem9uZGhlaWQgZW4gTWlsaWV1IChS
SVZNKTEcMBoGA1UEAxMTbG9rZXRnZXpvbmRsZXZlbi5ubDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALxSKv92bUbnCRYN2qWZ8hG1IFnOifZ+feP6CJ8I
mq9Ddfwns3Zwf70K91LRveFXVcqHj62UKjkWCqNj7lQqIAHCHI7hghiwk7Fyg/X9
jn6sECRXMWUA1NfUVrXwqEmi3nzHbaFnYE8JDyCjiLHdh8zCSZCXRdGd4EkFOxAp
yxVHRXipAauD5gHTC2fodS887XODRNEVzSCX1fAoVGCQJL927wQQBPofHlopIkly
7xHLwbsexcjoFax0rONSfCmkvCTbWCgizwtb7938gJ4NRmuXfrSHotmLEYFo0xjX
arRF261j80QRcfG3gSeBvquP/uuYnIQKqHERDd1RbO6IhekCAwEAAaOCA4YwggOC
MB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBTuxVI/
62/WUMUF/DYADTfiqp+fGTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEE
AbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAI
BgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0
aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYB
BQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNB
NC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29t
MIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdwDPEVbu1S58r/OHW9lpLpvpGnFn
SrAX7KwB0lt3zsw7CAAAAY31RkSLAAAEAwBIMEYCIQDrv1BN6FM9moMLgLfLAm/f
6Q0fIPwsFNFPjgXhEa2L/QIhAJgqxsEAgkurJDoUl5ZXf9QUPcn/0znojc1fctv7
NLcxAHUAouMK5EXvva2bfjjtR2d3U9eCW4SU1yteGyzEuVCkR+cAAAGN9UZFWAAA
BAMARjBEAiAJxWptqpau6UTNIwTpEtSMusr3yBuYSRG2mEaRV9ol7AIgUU2VJNT0
d9K3g6y2d3uFa3axtVAXvP4zD5X4wIM68rkAdQBOdaMnXJoQwzhbbNTfP1LrHfDg
jhuNacCx+mSxYpo53wAAAY31RkURAAAEAwBGMEQCIFj+EtzB1ZBxUB/MSz8uJC9J
GLiKNrKjk10QRdw7M/KrAiADHPU5rWAs/Yqi5sMtkSKKP1uuZySIz7cbZJRVOsS0
rzB/BgNVHREEeDB2ghNsb2tldGdlem9uZGxldmVuLm5sgiBpbnRlcnZlbnRpZXMu
bG9rZXRnZXpvbmRsZXZlbi5ubIIkd3d3LmludGVydmVudGllcy5sb2tldGdlem9u
ZGxldmVuLm5sghd3d3cubG9rZXRnZXpvbmRsZXZlbi5ubDANBgkqhkiG9w0BAQwF
AAOCAgEAXYy1Gx/q0msJN1kmSjP6C23eq0tUgf1z/AudHJwRCfSt5DVVbW2FCfK6
X07omrNoyhM2Tc/Rygdyoqba1EA79blIQ3TBUzqBRW1+LRthuizm+VGLv6Dbpuzv
Yy0Xk1L6w7gGAKa1sPGbxFgyeaXMhUv1weI3/AxZZVcbjlsS3HLucrzLISmzOq7H
mYIu2CmbgBdAimVlzm25+cHcFSCq0SXUZldPJqTQ+wGlxeHLSBjRMpWmdT4XDUjW
KgfZjDkVi9hO4+92OGlhGtr8pl27W0viQ7z1nC7qwuPYT25EdWqynL05A+PUxeJV
oNoBjVKXb5vHsPWSqhvuVFn+6CgQzIZ1GZAFMM/RgnovCAF8BJoLG78t5V/rQSU6
R7saNaRUwxPIXJGb3ISIGsD5EiNLeLIBmHm3B/Y7o8uX3EkbwGSfNSIfWZYWpVru
dpowVCMbctH5D8m6x+HhrtSB+237CxgLuI5xXtBbhdHV2qXUrIGvRy6i+ZfN4WuP
AK0Iypcl19MJ73JoFChtKHLFb+k5cXDqRR9e0QEjIcndzbkg2izHlp1V85PYMURL
ningh61JArxmYyWD5kSmVC7WRrqP8kzE07QzMC2xsXXxor2bgZGIDTIqsIbfYeFq
K6yiLu+FSqb8cq5Z9wfdb1ePu54phCMtP6e2nORFdftuUe5y6Hs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFIq/3ZtRucJFg3apZny
EbUgWc6J9n594/oInwiar0N1/CezdnB/vQr3UtG94VdVyoePrZQqORYKo2PuVCog
AcIcjuGCGLCTsXKD9f2OfqwQJFcxZQDU19RWtfCoSaLefMdtoWdgTwkPIKOIsd2H
zMJJkJdF0Z3gSQU7ECnLFUdFeKkBq4PmAdMLZ+h1Lzztc4NE0RXNIJfV8ChUYJAk
v3bvBBAE+h8eWikiSXLvEcvBux7FyOgVrHSs41J8KaS8JNtYKCLPC1vv3fyAng1G
a5d+tIei2YsRgWjTGNdqtEXbrWPzRBFx8beBJ4G+q4/+65ichAqocREN3VFs7oiF
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125307641814078178560823868856330814818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksinstituut voor Volksgezondheid en Milieu (RIVM)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loketgezondleven.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23773319865112576581466950360209304247146008351612757671450827729016018320256382622345990203864861113080185957477328962411893507136644847615904452776464978003333791843755082531479398293830860527853432530180708598186885581250956204160324664260976167813970453719493915896330853181127292228124477400480127521976215509967728338468985037482757289997311560003915624180709406172807349992979286732268682051819629230404689514499522346965317466638232506181275882278603972112882653518421426076053635408730447538292186666740887973864628876242860205296877073889859080701283905820933473796158578280278002681425952298995467973854697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eec5523feb6fd650c505fc36000d37e2aa9f9f19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loketgezondleven.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interventies.loketgezondleven.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interventies.loketgezondleven.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loketgezondleven.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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