www.ikpas.nl

- Stichting Positieve Leefstijl -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number 56:46:3e:4f:68:b0:6a:3e:55:4c:f0:2e:f3:73:2c:c8 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Positieve Leefstijl

Company registration number: 69594090
Organization: Stichting Positieve Leefstijl
State / Province: Gelderland
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 56:46:3e:4f:68:b0:6a:3e:55:4c:f0:2e:f3:73:2c:c8
Serial Number (int): 114678332218420181720537426857114676424
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6b:65:1d:57:54:a0:33:3b:cf:c2:fb:6a:50:ad:43:a3:4a:c4:8b:12
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): 32:d4:6e:53:15:e9:ed:bf:cc:fe:92:1a:ee:9f:e1:1b:12:ed:74:41
Fingerprint (sha256): f7:09:46:b8:d3:3f:d4:cd:69:11:cd:31:da:47:4c:59:57:0c:ea:2c:13:30:b4:56:ca:bc:72:1b:b7:9b:b3:fe

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate www.ikpas.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ikpas.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ikpas.nl
ikpas.nl

Other certificates including the domain name ikpas.nl

(limited to 100 certificates)
acceptatie.ikpas.nl
dashboard.ikpas.nl
fire.sengsara.com
portal.rpsit.ac.in
regio.ikpas.nl
dashboard.ikpas.nl
dashboard.ikpas.nl
acceptatie.ikpas.nl
cardinalcapital.partnerhub.co.za
acceptatie.ikpas.nl
www.segfaultstudios.com
ikpas.nl
www.ikpas.nl
ikpas.nl
travexagency.com
dashboard.ikpas.nl
app.tokenate.dev
www.ikpas.nl
ikpas.nl
ikpas.nl
documenten.ikpas.nl
regio.ikpas.nl
dashboard.ikpas.nl
ikpas.nl
dashboard.ikpas.nl
acceptatie.ikpas.nl
www.ikpas.nl
ikpas.nl
ikpas.nl
www.cindydavisforschoolboard.com
ikpas.nl
ikpas.nl
dashboard.ikpas.nl
ikpas.nl
acceptatie.ikpas.nl
dashboard.ikpas.nl
www.duiardal.se
dashboard.ikpas.nl
acceptatie.ikpas.nl
ikpas.nl
ikpas.nl
tracking.ikpas.nl
www.afterlife.garden
portal.ikpas.nl
www.ikpas.nl
regio.ikpas.nl
documenten.ikpas.nl
ikpas.nl
mediagenerator.ikpas.nl
dashboard.ikpas.nl
www.ikpas.nl
ikpas.nl
ikpas.nl
ikpas.nl
crm.ikpas.nl
dashboard.ikpas.nl
dashboard.ikpas.nl
dashboard.ikpas.nl
ikpas.nl
portal.ikpas.nl
acceptatie.ikpas.nl
tryfindr.com
documenten.ikpas.nl
ikpas.nl
portal.ikpas.nl
www.ikpas.nl
dashboard.ikpas.nl

Certificate

The complete raw certificate details for www.ikpas.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIGTCCBwGgAwIBAgIQVkY+T2iwaj5VTPAu83MsyDANBgkqhkiG9w0BAQsFADCB
kTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTkwNwYDVQQD
EzBTZWN0aWdvIFJTQSBFeHRlbmRlZCBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
Q0EwHhcNMjIxMDA0MDAwMDAwWhcNMjMxMTA0MjM1OTU5WjCBqDERMA8GA1UEBRMI
Njk1OTQwOTAxEzARBgsrBgEEAYI3PAIBAxMCTkwxHTAbBgNVBA8TFFByaXZhdGUg
T3JnYW5pemF0aW9uMQswCQYDVQQGEwJOTDETMBEGA1UECBMKR2VsZGVybGFuZDEm
MCQGA1UEChMdU3RpY2h0aW5nIFBvc2l0aWV2ZSBMZWVmc3RpamwxFTATBgNVBAMT
DHd3dy5pa3Bhcy5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMTQ
yvi9qaUnYs60rwagm9DRDrSIVNeBAhFsu60igtXZzm0eTwLFRdhJ/l9sF8z5vf5Y
reOBXEIoDiGt+i1abPGXsHPW6DkbDBAQGPOgDj432TPldQ0eFxJG4mgtWrP/aCvp
mI9biSlxbCZfPs2tSLOhgbZqSUoNuZ2jkgX/kXEhiS9mtaNA21ava5f8fcJZ4V9q
rSra3FbQasZ+YsDkpmCc6TpcK4LfHW4SS9J90m92A0pQSEmyhExir7TGwi4zjrPe
ySUOtcvZ6R8uOZdxC4kGZ7bm4vyeI3AIWRB4qYCreyQJHmkpuJu4XeEcsGqxDAPX
IL1lWMfQBHskzWEUgH9Dbv0YWj3WKd2ofTHnE/6PhNGVT8ZfIbCqtpG/lvbibZzu
yFWhTIQoMzvZPAVKN6CKxR4InFj3ifxF3dukFDEsKp6i+2pajuqfcVz9igLQvGoX
4SQ0nxyEjhvUqK7VKxLv54dL7jAESr7VYaYrCsUImYCslc9/2y1heGN2WhcAMEbU
rgHQzgjF7HxlH6mvZ7VIOBJ+TvC6JmHQD6uxQE7eTFr1WZki4bgmhw00JobGr1ZC
m91kz6iKIFRrzJc5ouWWKhtFZyGo88s+TarWsn+ou/rLxDxssjZeZh2kbEo0Fq47
920+a6kXFMTNVbXheSsaekbuMqwpDT4fZzMVTB9XAgMBAAGjggNSMIIDTjAfBgNV
HSMEGDAWgBQsaf+AyYeQrjThtOdMk4WZQOmnsjAdBgNVHQ4EFgQUa2UdV1SgMzvP
wvtqUK1Do0rEixIwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNQYMKwYBBAGyMQEC
AQUBMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAcGBWeB
DAEBMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2Vj
dGlnb1JTQUV4dGVuZGVkVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBhgYI
KwYBBQUHAQEEejB4MFEGCCsGAQUFBzAChkVodHRwOi8vY3J0LnNlY3RpZ28uY29t
L1NlY3RpZ29SU0FFeHRlbmRlZFZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQw
IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMCEGA1UdEQQaMBiC
DHd3dy5pa3Bhcy5ubIIIaWtwYXMubmwwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB
aAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABg6HwgBoAAAQD
AEcwRQIhAJjfaCEyCvoHvtey54joYcDBOEoyNmcF8VXhgS+qyhHiAiBKnn1ncTbt
CNw6kwdsL8SJ1A+Lva6626sXdNof/pgL1gB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4
cCUIFy+jqh0HE9MMAAABg6Hwf/MAAAQDAEgwRgIhAOvMTBKitHvz3l13ugrLDTXN
OfS6Ql/b7qZq5BmtNzg2AiEAnfWs67oCzAwuwdquIDWkUBHnoV7NSXxTfOycXrWc
vCEAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYOh8IAqAAAE
AwBGMEQCIBPSDwAfFqW4H90DrpcwGbQXN7fxu0zkjARRQEYrtrHoAiAO3wnJ/xG2
+XEtYPoNLRHTpVeXLDII526SGxcdSAlZGDANBgkqhkiG9w0BAQsFAAOCAQEAktu/
eTatBqs81c5a0vpAKPyu3l0dZTX62X3zqzou16dEV5yYH9Dw3yGi9ajz9kKY6TnG
KxqhhrvtkJ6n6GfIPQp0pKB1lFfX8SnnZWYtzZPDe+FkHdN5SYfVlBSI/kC7xBS3
s0vEG1uHSLBlYbV9a5/0IrYBU8hZgk/EsZcWUoxBYBvBZxdyCZw8vvuwUOaTWm4C
Wm4uUX8XngE2NOzvhPZU9XDykbf3R1VQXWl/8BDrvzfs2R1bwFxQLIEpRZkqsGZx
+TemzpHLbgo/3vEyXLpufCHRvb1+afBqI54fRyLi/oMApv4M3eN1qreKL3Kp5CqZ
6RhqnmrVgLuGKQpOhw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114678332218420181720537426857114676424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '69594090'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Positieve Leefstijl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ikpas.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802937583208981165868093669164357006697020349010967238050803556079287469513452140941524619397213218598366785556904976453211257977210697365123131524663485112143649326651385742122304566660198079096025206649966622241668818076145489941868918419750202715794739075134501790726031270510411579772705527378636817063467000319454527502550752683805958290613218084167316047266225328973694003900052332908660119178617740016620086705264954848413896105426401187725448577985317890259332410145110619560493954872748297217660534899908044302338190499140589964456517496592150853398318767732730646239868561560357880419176358007095963056774419745308218103198829670116188066239546560373567778769143390660241370029898562098015273127733915551770362513018348313018676479884573410900576665551890495227609319114829169601409324781445729681126127561425318294436495815910735177486049595678126359669150644927951240845441138212504800373351353384493618635284285121247359903802799933713072965837598700610977355008017291107016012682530646520517659406941496829113934128507977664268917473508660784621300188246455998163740860349143495210415194308793715350452243332538968602699518904516865292927336292603566387204064853676669346393850538324538711453668997496518518483901488983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b651d5754a0333bcfc2fb6a50ad43a34ac48b12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikpas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikpas.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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