digikoppeling.dataland.nl

- DataLand B.V. -

Issued by KPN PKIoverheid Organisatie CA - G2

About this certificate

This digital certificate with serial number 15:7b:2c:13:c6:43:8a:9a was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DataLand B.V.

Company registration number: 00000003243197400000
Organization: DataLand B.V.
State / Province: Zuid-Holland
Locality: Gouda
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 15:7b:2c:13:c6:43:8a:9a
Serial Number (int): 1547879360374213274
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 2a:de:aa:a7:6a:6e:06:dd:c0:8b:be:9c:7e:bc:6b:41:d6:71:ca:5b
AuthorityKeyId: 75:a3:4e:8f:1e:97:dd:6c:88:01:31:ef:72:21:c2:6e:60:94:7d:80

Fingerprint (sha1): 16:b0:1f:e3:bd:8d:0b:1f:58:87:a9:49:ee:67:13:35:82:31:e4:8a
Fingerprint (sha256): d6:3d:ea:7a:fe:c0:e1:45:7f:fd:40:cf:1c:62:51:68:f6:a2:5c:e1:12:ed:fe:37:4d:91:d0:68:32:65:95:37

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer

Revocation information

OCSP Server: http://g2ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl

Check the revocation status for certificate digikoppeling.dataland.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digikoppeling.dataland.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Email Protection
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digikoppeling.dataland.nl

Other certificates including the domain name dataland.nl

(limited to 100 certificates)
knoop.dataland.nl
dataland.nl
lufo.knoop.dataland.nl
weshare365.dataland.nl
digikoppelingtest.dataland.nl
dataland.nl
knooppunt.dataland.nl
knooppunt.dataland.nl
digikoppelingtest.dataland.nl
act.dataland.nl
digikoppeling.dataland.nl
lufo.knoop.dataland.nl
services.knoop.dataland.nl
knooppunt.dataland.nl
knooppunt.dataland.nl
weshare365.dataland.nl
dataland.nl
knooptm.dataland.nl
dataland.nl
knooppunt.dataland.nl
knooppunt.dataland.nl
knooppunttest.dataland.nl
belastingenknoop.dataland.nl
belastingenknoop.dataland.nl
weshare365.dataland.nl
weshare365.dataland.nl
bghu.knoop.dataland.nl
knooppuntdemo.dataland.nl
dataland.nl
regioknoopln.dataland.nl
www.dataland.nl
dataland.nl
dataland.nl
dataland.nl
knooppuntdemo.dataland.nl
dataland.nl
knooppunttest.dataland.nl
digikoppeling.dataland.nl
rbg.knoop.dataland.nl
dataland.nl
regioknoopln.dataland.nl
knooppunt.dataland.nl
dataland.nl
knooptm.dataland.nl
knooppunt.dataland.nl
knooptest.dataland.nl

Certificate

The complete raw certificate details for digikoppeling.dataland.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hcWfYsjBFKAC5w6ykHa
ZgprMue1cxwvZTRKlth6pmTX65JfUeQFN7w2KWlcJWWUheBZBsO9JAYOeYt7mbaI
EgLwTGstArweUZd/yInljyTiRMhdHGVMBjaQR9/75Kiyyz/cSEJi3II3pbBu4dg6
Sx8nPG8CqzeU7TWvZV86VqAH4naR29zUwEpfyDmlLu0xIRSx9Moafp4Y4oo0+Mwm
ykHbRqV9vS+yp+fCYKFyCpFsuBmLfcqMMhtdocKS12qXE1cdkRPp/eBPLewpg+HN
mP6M7VTlmpOaPO/HE1ZeAQwRkw1VSaIowSSFUYnbsPZ03BsjieB7NloJwbgV4lU3
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1547879360374213274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN PKIoverheid Organisatie CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-26 13:00:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-26 13:00:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gouda'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DataLand B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003243197400000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'digikoppeling.dataland.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28541241967039913054624681639610120478736087347578458903758392380746498841354548278603975817401533584057334833648520676588030914173498945311191009227044098131176607847375947680069472477416882245111504697245836429952798188100435790624784672938114236544677781338958978624547369767829059088445639267513069612727244580505085003817185539970539029103554741440317047117154814046936628725400504182789796398396397140545836358418211387810226269560776675539510011419929046478473914362468057020478681396624133345347595944609229671389977881862744102360467510306911841670951229764162005599191588497095635480238581936371782936508237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g2ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2adeaaa76a6e06ddc08bbe9c7ebc6b41d671ca5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 75a34e8f1e97dd6c880131ef7221c26e60947d80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digikoppeling.dataland.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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