portal.atbank.nl

- Amsterdam Trade Bank N.V. -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 79:a1:76:07:c2:18:06:c6:a1:54:75:5e was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Amsterdam Trade Bank N.V.

Company registration number: 33260432
Organization: Amsterdam Trade Bank N.V.
Address: Herengracht 469-475
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 79:a1:76:07:c2:18:06:c6:a1:54:75:5e
Serial Number (int): 37642880627698831839907312990
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 48:a2:4c:e5:a7:a4:17:02:cb:d0:ad:31:77:5f:83:19:d4:83:a7:af
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): b4:50:b0:75:af:4a:f5:7d:73:4f:90:2b:f0:e0:20:73:6b:1e:de:79
Fingerprint (sha256): e5:8d:1a:3a:8e:e4:4f:6d:2a:38:1e:fc:5a:88:be:34:ca:50:18:14:fa:93:19:dd:9e:ed:9f:21:1a:a1:91:78

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate portal.atbank.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.atbank.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.atbank.nl

Other certificates including the domain name atbank.nl

(limited to 100 certificates)
online.atbank.nl
www.atbank.nl
*.test.atbank.nl
online.atbank.nl
*.atbank.nl
webra.atbank.nl
sts.atbank.nl
fibr.com
atbconnect.atbank.nl
*.atbank.nl
mobile.atbank.nl
fibr.com
*.test.atbank.nl
transfer.atbank.nl
mobile.atbank.nl
portal.atbank.nl
*.test.atbank.nl
transfer.atbank.nl
bdrc.acc.atbank.nl
www.atbank.nl
mdm.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
transfer.atbank.nl
mdm.atbank.nl
*.atbank.nl
online.atbank.nl
mobile.atbank.nl
*.atbank.nl
www.atbank.nl
portal.atbank.nl
www.atbank.nl
fibr.com
remote.atbank.nl
*.test.atbank.nl
webra.atbank.nl
sts.atbank.nl
online.atbank.nl
fibr.com
bdrc.atbank.nl
online.atbank.nl
online.atbank.nl
transfer.atbank.nl
*.acc.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
*.atbank.nl
mail10.atbank.nl
portal.atbank.nl
www.atbank.nl
*.acc.atbank.nl
mobile.atbank.nl
transfer.atbank.nl
*.atbank.nl
atbconnect.atbank.nl

Certificate

The complete raw certificate details for portal.atbank.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHkTCCBnmgAwIBAgIMeaF2B8IYBsahVHVeMA0GCSqGSIb3DQEBCwUAMGIxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTgwNgYDVQQDEy9H
bG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMzAe
Fw0xODAxMTUxNTA2MDJaFw0xOTAyMTUxNTA2MDJaMIHdMR0wGwYDVQQPDBRQcml2
YXRlIE9yZ2FuaXphdGlvbjERMA8GA1UEBRMIMzMyNjA0MzIxEzARBgsrBgEEAYI3
PAIBAxMCTkwxCzAJBgNVBAYTAk5MMRYwFAYDVQQIEw1Ob29yZC1Ib2xsYW5kMRIw
EAYDVQQHEwlBbXN0ZXJkYW0xHDAaBgNVBAkTE0hlcmVuZ3JhY2h0IDQ2OS00NzUx
IjAgBgNVBAoTGUFtc3RlcmRhbSBUcmFkZSBCYW5rIE4uVi4xGTAXBgNVBAMTEHBv
cnRhbC5hdGJhbmsubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO
Ofcv5Twk3NsFVeWfxb9GICenevhfJEI74anTP/lHsRrb4XRnvk7RP9HUX0j5wJHa
tg0lNBM28l1zOlgKJFRuOataroixSCLYcIg6VMsary0ho+CU5pkXiQmZbpltdWud
v9f5831U+OO6CwdH6uW+Vsos1+hZz+F0MMFIh9am9YsZUZcUc20K2AmaNXDEDoow
ndfU5Yv9wPWx9eEHyf4AA5pPW1ZNmScnvM4VrAZneLHBsKLQYW7gEXVKEcFjlFOM
XLNFGbO3o4tm7AqfaNPTFQncVrvIUPx5p+51REmQmShknUjt2mglAC8F88rJj2TU
RAkC9pMeTAAPggBqvaLfAgMBAAGjggPJMIIDxTAOBgNVHQ8BAf8EBAMCBaAwgZYG
CCsGAQUFBwEBBIGJMIGGMEcGCCsGAQUFBzAChjtodHRwOi8vc2VjdXJlLmdsb2Jh
bHNpZ24uY29tL2NhY2VydC9nc2V4dGVuZHZhbHNoYTJnM3IzLmNydDA7BggrBgEF
BQcwAYYvaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzZXh0ZW5kdmFsc2hh
MmczcjMwVQYDVR0gBE4wTDBBBgkrBgEEAaAyAQEwNDAyBggrBgEFBQcCARYmaHR0
cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wBwYFZ4EMAQEwCQYD
VR0TBAIwADBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vY3JsLmdsb2JhbHNpZ24u
Y29tL2dzL2dzZXh0ZW5kdmFsc2hhMmczcjMuY3JsMBsGA1UdEQQUMBKCEHBvcnRh
bC5hdGJhbmsubmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1Ud
DgQWBBRIokzlp6QXAsvQrTF3X4MZ1IOnrzAfBgNVHSMEGDAWgBTds+dtqC7oxU5u
z3TmdTyUFc7oHTCCAfMGCisGAQQB1nkCBAIEggHjBIIB3wHdAHUA3esdK3oNT6Yg
i4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFg+lseEAAABAMARjBEAiBwyLk+xV1c
Qn8RcW8E0gZkiIokSud4+gi1DLczGrdFJgIgPGNEsQ0ms7W0imFwuwk4J1qhVYph
A2kecrDUEqzRdUQAdQBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAA
AWD6Wx6HAAAEAwBGMEQCIC7u71L/AUW0+anStXZLvcrQPFtfCuwPTrm7ZGs4wIW/
AiBbLbm/8cdkRYd/6PNu9onyd5fovu5Nr7UkHvxvCSfdPgB2AKS5CZC0GFgUh7sT
osxncAo8NZgE+RvfuON3zQ7IDdwQAAABYPpbIY8AAAQDAEcwRQIgVmC1dtUlUPxI
fsqF1MJpXG4zEc72AJVV1CyAWIlhjF8CIQDJgGjts9wRVvFqk++Hdt+wi1rUR4Ch
MQxDRG702BAf3AB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAAB
YPpbI8oAAAQDAEYwRAIgBDDXrBlGxFYvmYQwIEyouwCXP6gnJBX2MXX/wKy1PmgC
ICcC0fz+qtLubiFotmloPbc47Xpz8OZqzl/6c0xi2u36MA0GCSqGSIb3DQEBCwUA
A4IBAQANSB3tkQjbOArKdmeT0h04WxF7CRII0wxqJMvItfASvonJFJz+SQjQlgpP
s4XWpeOeKJvofd6yU2BOu/y0bDaCzkUg3wHmvgNtCjqdfGISCNzzOkeoLXTiBgcu
aj7nFHfIfbrSf21zNLC5NkN9AN4vEEz88FewZwO6TM0cXoRJuHWb4kpTkhDD9k06
QXKD5OrQ9zpdgspawSGZ/kj0G2STMucxULRflLWOzzLtS/mkYZOCltqL2Kq/O9XS
1WbZkptbg+8hAnMju0diF9joSe6EqyZ8/I+EKxMjQSvzQk5BFuqkDOf861lXdnko
zmbDO04hZy9tLxkeTa4kYtTF9sxw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjn3L+U8JNzbBVXln8W/
RiAnp3r4XyRCO+Gp0z/5R7Ea2+F0Z75O0T/R1F9I+cCR2rYNJTQTNvJdczpYCiRU
bjmrWq6IsUgi2HCIOlTLGq8tIaPglOaZF4kJmW6ZbXVrnb/X+fN9VPjjugsHR+rl
vlbKLNfoWc/hdDDBSIfWpvWLGVGXFHNtCtgJmjVwxA6KMJ3X1OWL/cD1sfXhB8n+
AAOaT1tWTZknJ7zOFawGZ3ixwbCi0GFu4BF1ShHBY5RTjFyzRRmzt6OLZuwKn2jT
0xUJ3Fa7yFD8eafudURJkJkoZJ1I7dpoJQAvBfPKyY9k1EQJAvaTHkwAD4IAar2i
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37642880627698831839907312990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-15 15:06:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 15:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '33260432'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herengracht 469-475'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam Trade Bank N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.atbank.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26033674713167950040662730163705596486161803863607601197434218817952692142763151826082845019536645575393519736948891699459558223905628797271003541985427956975941696405897853710323049498208502771399956589146759983927725587423003018548486844857030626122734104912225209019581016083896615587099013094482833287810835244930176463345326997981010198018680650546809730170411905283760017091640097947695693432120139593500001139542061776627036167657212571464820971534709122797718674941365093293980221076364237022105523020126269368623811181126292590864040559393222150356462222242179055793254669165620360697847865405022793247859423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.atbank.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48a24ce5a7a41702cbd0ad31775f8319d483a7af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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