knooppunt.dataland.nl
- Omgevingsdienst de Vallei -
Issued by KPN PKIoverheid Organisatie CA - G2
About this certificate
This digital certificate with serial number 44:2f:2c:3e:dc:7b:34:2d was issued on by KPN B.V..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Omgevingsdienst de Vallei
Company registration number:
00000001852282229000
Organization: Omgevingsdienst de Vallei
Organization: Omgevingsdienst de Vallei
State / Province:
Gelderland
Locality: Ede
Country: NL
Locality: Ede
Country: NL
KPN B.V.
Organization:
KPN B.V.
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 44:2f:2c:3e:dc:7b:34:2dSerial Number (int): 4913194366983156781
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 29:85:66:5a:88:ef:15:fa:ab:e8:05:5b:c7:de:72:63:96:ca:5b:d4
AuthorityKeyId: 75:a3:4e:8f:1e:97:dd:6c:88:01:31:ef:72:21:c2:6e:60:94:7d:80
Fingerprint (sha1): a9:46:e6:c3:f3:00:30:3a:9b:c0:b7:f9:c8:fd:ad:59:8b:b4:8c:9e
Fingerprint (sha256): e6:bd:cd:b9:21:3e:ed:2d:5b:7b:ce:9c:30:df:67:03:fb:85:15:90:99:a6:6a:fa:19:49:4d:ea:db:f2:62:f4
Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer
Revocation information
OCSP Server: http://g2ocsp.managedpki.comCRL Distribution Point: http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl
Check the revocation status for certificate knooppunt.dataland.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for knooppunt.dataland.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Email Protection
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
knooppunt.dataland.nl
Other certificates including the domain name dataland.nl
(limited to 100 certificates)
knoop.dataland.nl
dataland.nl
lufo.knoop.dataland.nl
weshare365.dataland.nl
digikoppelingtest.dataland.nl
dataland.nl
knooppunt.dataland.nl
knooppunt.dataland.nl
digikoppelingtest.dataland.nl
act.dataland.nl
digikoppeling.dataland.nl
lufo.knoop.dataland.nl
services.knoop.dataland.nl
knooppunt.dataland.nl
knooppunt.dataland.nl
weshare365.dataland.nl
dataland.nl
knooptm.dataland.nl
dataland.nl
knooppunt.dataland.nl
knooppunt.dataland.nl
knooppunttest.dataland.nl
belastingenknoop.dataland.nl
belastingenknoop.dataland.nl
weshare365.dataland.nl
weshare365.dataland.nl
bghu.knoop.dataland.nl
knooppuntdemo.dataland.nl
dataland.nl
regioknoopln.dataland.nl
www.dataland.nl
dataland.nl
dataland.nl
dataland.nl
knooppuntdemo.dataland.nl
dataland.nl
knooppunttest.dataland.nl
digikoppeling.dataland.nl
rbg.knoop.dataland.nl
dataland.nl
regioknoopln.dataland.nl
knooppunt.dataland.nl
dataland.nl
knooptm.dataland.nl
knooppunt.dataland.nl
knooptest.dataland.nl
dataland.nl
lufo.knoop.dataland.nl
weshare365.dataland.nl
digikoppelingtest.dataland.nl
dataland.nl
knooppunt.dataland.nl
knooppunt.dataland.nl
digikoppelingtest.dataland.nl
act.dataland.nl
digikoppeling.dataland.nl
lufo.knoop.dataland.nl
services.knoop.dataland.nl
knooppunt.dataland.nl
knooppunt.dataland.nl
weshare365.dataland.nl
dataland.nl
knooptm.dataland.nl
dataland.nl
knooppunt.dataland.nl
knooppunt.dataland.nl
knooppunttest.dataland.nl
belastingenknoop.dataland.nl
belastingenknoop.dataland.nl
weshare365.dataland.nl
weshare365.dataland.nl
bghu.knoop.dataland.nl
knooppuntdemo.dataland.nl
dataland.nl
regioknoopln.dataland.nl
www.dataland.nl
dataland.nl
dataland.nl
dataland.nl
knooppuntdemo.dataland.nl
dataland.nl
knooppunttest.dataland.nl
digikoppeling.dataland.nl
rbg.knoop.dataland.nl
dataland.nl
regioknoopln.dataland.nl
knooppunt.dataland.nl
dataland.nl
knooptm.dataland.nl
knooppunt.dataland.nl
knooptest.dataland.nl
Certificate
The complete raw certificate details for knooppunt.dataland.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGrDCCBJSgAwIBAgIIRC8sPtx7NC0wDQYJKoZIhvcNAQELBQAwTjELMAkGA1UE BhMCTkwxETAPBgNVBAoMCEtQTiBCLlYuMSwwKgYDVQQDDCNLUE4gUEtJb3Zlcmhl aWQgT3JnYW5pc2F0aWUgQ0EgLSBHMjAeFw0xNzA0MTQxMTMxMTVaFw0xOTA0MTQx MTMxMTVaMIGTMQswCQYDVQQGEwJOTDETMBEGA1UECAwKR2VsZGVybGFuZDEMMAoG A1UEBwwDRWRlMSIwIAYDVQQKDBlPbWdldmluZ3NkaWVuc3QgZGUgVmFsbGVpMR0w GwYDVQQFExQwMDAwMDAwMTg1MjI4MjIyOTAwMDEeMBwGA1UEAwwVa25vb3BwdW50 LmRhdGFsYW5kLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEfJ WAiRjp0btfdy7KpmVS05pHnGx3CpASBrf+N60WsLYod78SJpBaIwYjvz2n7cSAM4 iEHwzGAItxSFJ3TuYdWxKw8pFHLt8WQHp2B2tgtIIguyzYy/UDur/rYsqJtnj/i9 pgZ0Ivxs1fzDxnGOU5PqXc1PBoIUHS48ka1DVuAExeu9JIGQfZeiBS7OEYrPzbMa /bNU//hyYA2mnz5hNlB97uGu32AA10DaJMeNTBqMbl9jtdM8njGjCgWbS2yvSLbQ 3FpRWnbpbFwqmSMyi2ZRSXAZFRsC1ipFdGJsnvP3s5KnUktERCjGJJ7Ek7C/7976 BtLsQxP4jfZPF9ttlQIDAQABo4ICRjCCAkIwgYoGCCsGAQUFBwEBBH4wfDBQBggr BgEFBQcwAoZEaHR0cDovL2NlcnQubWFuYWdlZHBraS5jb20vQ0FjZXJ0cy9LUE5Q S0lvdmVyaGVpZE9yZ2FuaXNhdGllQ0FHMi5jZXIwKAYIKwYBBQUHMAGGHGh0dHA6 Ly9nMm9jc3AubWFuYWdlZHBraS5jb20wHQYDVR0OBBYEFCmFZlqI7xX6q+gFW8fe cmOWylvUMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUdaNOjx6X3WyIATHvciHC bmCUfYAwgbEGA1UdIASBqTCBpjCBmQYKYIQQAYdrAQIFBjCBijA3BggrBgEFBQcC ARYraHR0cHM6Ly9jZXJ0aWZpY2FhdC5rcG4uY29tL3BraW92ZXJoZWlkL2NwczBP BggrBgEFBQcCAjBDDEFPcCBkaXQgY2VydGlmaWNhYXQgaXMgaGV0IENQUyBQS0lv dmVyaGVpZCB2YW4gS1BOIHZhbiB0b2VwYXNzaW5nLjAIBgZngQwBAgIwVgYDVR0f BE8wTTBLoEmgR4ZFaHR0cDovL2NybC5tYW5hZ2VkcGtpLmNvbS9LUE5QS0lvdmVy aGVpZE9yZ2FuaXNhdGllQ0FHMi9MYXRlc3RDUkwuY3JsMA4GA1UdDwEB/wQEAwIF oDAnBgNVHSUEIDAeBggrBgEFBQcDAgYIKwYBBQUHAwQGCCsGAQUFBwMBMCAGA1Ud EQQZMBeCFWtub29wcHVudC5kYXRhbGFuZC5ubDANBgkqhkiG9w0BAQsFAAOCAgEA q0usaT3VYnjMXVpGvM5CHeb/q5y+hiqRERM8O39aYuh1hbyZTyyuM9liOuyvd8Kg 3Vdh7OE+R8env85XDJKbm0vzEI1j+dpASjv13hZWC0TgTgKq16VoaE9BLomuiPHL NaqS0kT2KDdwATYpAFMKONtqdmylGJ0p+LS3WCTmJ3xJfwKVFdUCGoAO3oRVKpmQ AuOo3ElBKDsDh7YIR56kO3jIcEecjS9ydBjLrG1aMwCdVKOJbE1nrqUNByaKUTDO 1wJqnxZiRIrQgYNmteSOc6bbfONJYx7Y8mIDWe28w2ryYo4QCGauetgHJNTNbPPq qcfCFKYDDZqhVOXowCgBDhEenwwm5qdlLSxkNPe4O0gVnqe2Fn/sXr6tOs04Y4Em IYVA6BKXs9NgrGwkuR/rdy1gws1dIl0JJY6KS+MPRw+db5ZQMdmGv2tl4Xsv5PIR u0t2V/t5ABIVzF0R5hPdPsN+afI7iuFc9Ic5OE6kmGJnvX9atBMok/0dB/99rcUW /RhI21dq2TlNxEUJ0ttEaOY8KyfLBwlXsEJ426H6gNcWk5ANbyMyWGJmTVVtAMbx DaRPZ2uGKZHiYh6+pFEnuEYcSDS3MqDu3ExGG9ExNnd+MeV3O4p97asOJdrd+v8b x/EjKzUAC4k9Bo8cX0YsxQ+6pkJlcE9oFWF1Tiad8XY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEfJWAiRjp0btfdy7Kpm VS05pHnGx3CpASBrf+N60WsLYod78SJpBaIwYjvz2n7cSAM4iEHwzGAItxSFJ3Tu YdWxKw8pFHLt8WQHp2B2tgtIIguyzYy/UDur/rYsqJtnj/i9pgZ0Ivxs1fzDxnGO U5PqXc1PBoIUHS48ka1DVuAExeu9JIGQfZeiBS7OEYrPzbMa/bNU//hyYA2mnz5h NlB97uGu32AA10DaJMeNTBqMbl9jtdM8njGjCgWbS2yvSLbQ3FpRWnbpbFwqmSMy i2ZRSXAZFRsC1ipFdGJsnvP3s5KnUktERCjGJJ7Ek7C/7976BtLsQxP4jfZPF9tt lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4913194366983156781 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN PKIoverheid Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-14 11:31:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 11:31:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ede' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Omgevingsdienst de Vallei' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000001852282229000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'knooppunt.dataland.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17203808717652096543537709816660261912233597893760771704903161699846479784354938512608983329749989831655328446105367720136106534217142808871124077551352572175527945775057348510805107288008698485068619073332281947496341969864128953143140638991814682893718920077864299561339928541439167315035017178020115342363410002257814820650589189349139894581376219575291593810357052220632164576933061077184902071985483428994891066681826377127187217061365005234895245747582386695835803938260490424181553435440257121354478514987051102305096767559118426903435776146852952290751656073541216302880180616266621403513186919266189640953237 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNPKIoverheidOrganisatieCAG2.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g2ocsp.managedpki.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2985665a88ef15faabe8055bc7de726396ca5bd4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 75a34e8f1e97dd6c880131ef7221c26e60947d80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNPKIoverheidOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knooppunt.dataland.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 00ab4bac693dd56278cc5d5a46bcce421de6ffab9cbe862a9111133c3b7f5a62e87585bc994f2cae33d9623aecaf77c2a0dd5761ece13e47c7a7bfce570c929b9b4bf3108d63f9da404a3bf5de16560b44e04e02aad7a568684f412e89ae88f1cb35aa92d244f628377001362900530a38db6a766ca5189d29f8b4b75824e6277c497f029515d5021a800ede84552a999002e3a8dc4941283b0387b608479ea43b78c870479c8d2f727418cbac6d5a33009d54a3896c4d67aea50d07268a5130ced7026a9f1662448ad0818366b5e48e73a6db7ce349631ed8f2620359edbcc36af2628e100866ae7ad80724d4cd6cf3eaa9c7c214a6030d9aa154e5e8c028010e111e9f0c26e6a7652d2c6434f7b83b48159ea7b6167fec5ebead3acd38638126218540e81297b3d360ac6c24b91feb772d60c2cd5d225d09258e8a4be30f470f9d6f965031d986bf6b65e17b2fe4f211bb4b7657fb79001215cc5d11e613dd3ec37e69f23b8ae15cf48739384ea4986267bd7f5ab4132893fd1d07ff7dadc516fd1848db576ad9394dc44509d2db4468e63c2b27cb070957b04278dba1fa80d71693900d6f23325862664d556d00c6f10da44f676b862991e2621ebea45127b8461c4834b732a0eedc4c461bd13136777e31e5773b8a7dedab0e25daddfaff1bc7f1232b35000b893d068f1c5f462cc50fbaa64265704f681561754e269df176